Authentication

The Tracktile API supports two authentication methods: API Tokens for programmatic access and JWT tokens for user sessions.

API Tokens

API tokens are the recommended method for integrations, scripts, and automated workflows.

Creating an API Token

1. Log in to the Tracktile application
2. Navigate to Admin > Settings > API Manager
3. Click Create Token
4. Enter a descriptive name and select a token type:
   • api - General API access
   • cli - Command-line interface usage
   • machine - Machine-to-machine integrations
   • sensor - IoT sensor and device integrations
5. Optionally set an expiration date
6. Copy and securely store your token immediately (it won’t be shown again)

Caution

API tokens provide full access to your tenant’s data. Never share them or commit them to version control.

Token Format

API tokens use a prefixed format: {type}-{token}

For example: api-YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXo=

Using Your Token

Include your token in the Authorization header of every request:

curl -X GET "https://api.tracktile.io/products" \
  -H "Authorization: Bearer api-YOUR_TOKEN_HERE"

Token Lifecycle

• Expiration: Tokens can be created with an optional expiration date, or as non-expiring
• Revocation: Revoke tokens at any time from the API Manager
• Last Used: The API Manager shows when each token was last used

JWT Authentication

JWT tokens are used for user sessions in the Tracktile web and mobile applications. These are obtained through the login flow and are typically not used for external integrations.

curl -X GET "https://api.tracktile.io/products" \
  -H "Authorization: Bearer eyJhbGciOiJIUzI1NiIs..."

JWT tokens contain user identity and tenant information, and expire based on session settings.