Create an API token
curl --request POST \
--url https://app.orgo.space/api/v1/user-api-tokens \
--header 'Api-Token: <api-key>'import requests
url = "https://app.orgo.space/api/v1/user-api-tokens"
headers = {"Api-Token": "<api-key>"}
response = requests.post(url, headers=headers)
print(response.text)const options = {method: 'POST', headers: {'Api-Token': '<api-key>'}};
fetch('https://app.orgo.space/api/v1/user-api-tokens', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://app.orgo.space/api/v1/user-api-tokens",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_HTTPHEADER => [
"Api-Token: <api-key>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "https://app.orgo.space/api/v1/user-api-tokens"
req, _ := http.NewRequest("POST", url, nil)
req.Header.Add("Api-Token", "<api-key>")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://app.orgo.space/api/v1/user-api-tokens")
.header("Api-Token", "<api-key>")
.asString();require 'uri'
require 'net/http'
url = URI("https://app.orgo.space/api/v1/user-api-tokens")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["Api-Token"] = '<api-key>'
response = http.request(request)
puts response.read_body{
"id": 42,
"name": "Boston Chapter",
"expiresAt": "2026-01-15T10:30:00+00:00",
"lastUsedAt": "2026-01-15T10:30:00+00:00",
"isActive": true,
"isReadOnly": true,
"dateCreated": "2026-01-15T10:30:00+00:00"
}UserApiToken
Create an API token
Generates a new API token for the authenticated admin user. Accepts optional name, expiresAt, and isReadOnly fields in the request body. The raw token value is returned only once in the response and cannot be retrieved later. Requires ADMIN_TENANT permission.
POST
/
api
/
v1
/
user-api-tokens
Create an API token
curl --request POST \
--url https://app.orgo.space/api/v1/user-api-tokens \
--header 'Api-Token: <api-key>'import requests
url = "https://app.orgo.space/api/v1/user-api-tokens"
headers = {"Api-Token": "<api-key>"}
response = requests.post(url, headers=headers)
print(response.text)const options = {method: 'POST', headers: {'Api-Token': '<api-key>'}};
fetch('https://app.orgo.space/api/v1/user-api-tokens', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://app.orgo.space/api/v1/user-api-tokens",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_HTTPHEADER => [
"Api-Token: <api-key>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "https://app.orgo.space/api/v1/user-api-tokens"
req, _ := http.NewRequest("POST", url, nil)
req.Header.Add("Api-Token", "<api-key>")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://app.orgo.space/api/v1/user-api-tokens")
.header("Api-Token", "<api-key>")
.asString();require 'uri'
require 'net/http'
url = URI("https://app.orgo.space/api/v1/user-api-tokens")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["Api-Token"] = '<api-key>'
response = http.request(request)
puts response.read_body{
"id": 42,
"name": "Boston Chapter",
"expiresAt": "2026-01-15T10:30:00+00:00",
"lastUsedAt": "2026-01-15T10:30:00+00:00",
"isActive": true,
"isReadOnly": true,
"dateCreated": "2026-01-15T10:30:00+00:00"
}Authorizations
ApiTokenJWT
Server-to-server authentication. Generate a token in the admin UI at
Settings → Developers → API Access. Send the raw token in the
Api-Token header — there is no Bearer prefix.
Tokens can be marked read-only at creation time, in which case the API
rejects any non-GET request with 403 Forbidden.

