Skip to main content
Experro uses two authentication models, depending on which part of the API you are calling. This page covers both, how to create an access token, and how to choose the right base URL.

​
Authentication Models

​
Access token

Used by the Management APIs and the Content Delivery APIs. Every request carries a token plus the identifiers for what you are targeting.

​
Storefront headers

Used by the Discovery APIs. These endpoints are designed to be called directly from your storefront’s browser code, so they identify you with headers instead of a token.

​
Which API Uses Which

​
Creating an Access Token

You need administrator privileges in the Experro Admin Panel to create and manage tokens.
  1. Log in to the Experro Admin Panel.
  2. Go to Workspace Settings → API & CLI Tokens.
  3. The API Tokens tab is selected by default.
API Tokens Screen Then create the token:
  1. Click Create Token.
  2. Fill in:
    • Name (required): Descriptive name for your app or integration.
    • Description (optional): Purpose of the token.
    • Permissions (required): Read-Only (GET only) or Full Access (GET, POST, PUT, DELETE).
    • Expiration (optional): Expiry date. Leave blank for no expiry.
  3. Click Save.
  4. Copy or download the token when prompted.
  5. Click Done.
Create API Token Dialog
The token value is shown only once. Copy or download it immediately.

​
Viewing Existing Tokens

The API Tokens screen lists every token with its Token Name, Created By, Created At, Permissions, and Expiration. A blank expiration means the token never expires.

​
Finding Your Header Values

​
Base URLs

Which base URL you use depends on the API.

​
Management and Content Delivery APIs

Always use the Experro-hosted domain:
Examples

​
Discovery APIs

Call these on your storefront domain:
To find the base address:
  1. Go to Workspace Settings → Channels.
  2. Open Channel Settings.
  3. Go to the Languages tab.
  4. Copy the URL from Language URLs that matches the language and environment you need.
Until you have pointed your custom domain, use the Experro-hosted domain. Once your own domain is configured both will work, but we strongly recommend your custom domain for production.