Create a personal access token
Generate tokens from the Immoteur dashboard under Settings → API tokens. Use a token only in the integration that needs it.
- Copy the token and store it in a secret manager or environment variable.
- Use the bearer format
Authorization: Bearer <token>in every API request. - Rotate tokens regularly and revoke unused credentials to keep integrations secure.
Configure data accesses
Immoteur applies data access limits to API responses. Align the configuration with your agreement so the API returns the data available to your integration.
- Review the
meta.dataAccessLimitblock in API responses to confirm the effective access. - Use endpoint filters in addition to data access limits when you need a narrower result.
Use tokens safely
- Inject
$IMMOTEUR_TOKENthrough environment variables or a secret store rather than hard-coding it. - Rotate a token by updating the integration configuration, then revoke the token that is no longer used.
- If a request returns
401, confirm the token and Bearer header before retrying. See API reliability for response handling.