Create a personal access token
Generate tokens from the Immoteur dashboard under Settings → API tokens. Each token inherits the permissions of your workspace, so keep them scoped to automations and CI users.
- Copy the token once and store it in a secret manager; it will not be displayed again.
- Use the bearer format
Authorization: Bearer <token>in every API request. - Rotate tokens regularly and revoke unused credentials to keep integrations secure.
Configure data accesses
Immoteur enforces contractual scopes via data accesses. Align the filters with your agreement so the API returns the expected geographies and publishers.
- Define the list of departments and SIREN/SIRET you are entitled to receive.
- Review the
meta.dataAccessLimitblock in API responses to confirm the effective scope.
Environment setup tips
- Inject
$IMMOTEUR_TOKENthrough environment variables or secret stores rather than hard-coding. - Pause schedulers before rotating tokens to avoid
401 Unauthorizedresponses. - Keep a dedicated staging token if you later test non-production environments.