The interface allows creating multiple API keys (tokens) to give secure access to several partners; each key may access only selected components.

A user with SUPER rights finds the key as follows:

1. Open the employee card the key was created for (e.g. XML)
   
   
2. Go to the Admin tab
   
   
3. Go to the XML interfaces section
4. On the relevant interface row, click to reveal the key

The token is sent via POST in the variable token (form/urlencoded). It replaces the legacy appkey + database name.

• Invalid/missing token: <result type=“5” desc=“Unauthorized”/>
• Variable token missing: <err>token required</err>