API tokens

Tokens let a program read — and optionally write — your FolianX notes on your behalf. You create them, scope them, and revoke them, all from Settings.

Creating a token

Go to Settings → API tokens, enter a name, pick the access level and click Create token. Name it after where it will be used, so a year from now you know what breaks if you revoke it.

It is shown once

The token appears immediately after you create it, and never again. We store only a hash, so we genuinely cannot recover it — not even to help you. Copy it straight into wherever it belongs. If you lose it, revoke it and create a replacement; there is no downside to doing so.

Choosing access

Read onlySearch and read pages. Cannot modify anything. The right default, and the right choice for anything you are still evaluating.
Read and writeAlso create, update and append to pages. Choose this when you want an assistant to write notes for you.

Access is enforced on the server. A read-only token attempting a write is refused, regardless of what the calling program believes it is allowed to do.

What a token can see

A token acts as you, and is limited to what you can already see — your own pages, plus any teamspace you are a member of. It never widens your access, and it cannot see another member's private pages.

Checking a token is working

The list shows each token's prefix, access level, creation date and when it was last used. Last used is the quickest way to tell whether a connection is live or whether something is misconfigured at the other end.

Revoking

Click Revoke. It takes effect immediately — the next request made with that token is refused. Revoke a token whenever it has been exposed, whenever a laptop is lost, or whenever you simply stop using the tool it was for.

Keeping tokens safe

  • Treat a token like a password: it grants access to your notes.
  • Give each tool its own token, so revoking one does not disturb the others.
  • Prefer read-only unless something genuinely needs to write.
  • Never commit one to a repository or paste it into a shared document.