Personal Access Tokens

1. Overview

You now have the option to use Personal Access Tokens (PATs) in Cinchy, which are alternatives to using passwords for authentication. Similar to Cinchy Bearer Tokens, you can use a Cinchy PAT to call the Cinchy API as your current user, meaning your associated access controls will be honoured as well. Cinchy PATs, however, have an expiration date of up to 1 year. A single user can have up to 5 PATs active at one time. See Authentication for details on using a PAT in lieu of a Bearer token in your Cinchy API.

2. Creating a PAT

1. From the Cinchy homepage, navigate to your User Settings > Tokens. Any tokens that you make will appear here. You will also be able to see any expired tokens.

1. Click “Generate New Token”.

Note: You can have up to 5 active (non-expired) tokens at a time. Once you reach that threshold, the “Generate New Token” button will not work.

3. Input the following information about your PAT and click Generate:

1. Token Name

2. Description

3. Expiration

4. Once generated, make sure to copy down the PAT somewhere secure. You will not be able to view the PAT again once you navigate away from this screen.

3. Deleting a PAT

1. From the Cinchy homepage, navigate to your User Settings > Tokens. Any tokens that you make will appear here.

2. Click the “Delete” button next to the applicable PAT.

4. Using a PAT in an API

Cinchy PATs can be used in much the same way that Bearer tokens are used for in API authentication. I.E. in the Authorization header with the value: "Bearer <token>".

You may also wish to review the information on using PATs in Excel or PowerBI.