Authentication - VPSBG Documentation

API v1 uses personal bearer tokens. Create and manage them from API Tokens in the VPSBG Console.

Create a tokenCopy link

Sign in to the VPSBG Console and open API Tokens under Account.
Select Create new API token.
Give the token a descriptive name.
Optionally choose an expiration date.
Enable the write ability if the integration needs to create, update, or delete resources.
Create the token and copy it immediately.

Every token has the read ability. A read-only token can make GET requests; other methods require write and return 401 Unauthorized without it.

The token value is displayed only once. Store it in a secrets manager or another secure location before closing the dialog.

Authenticate a requestCopy link

Send the token in the Authorization header:

Authorization: Bearer <your-api-token>

For example:

curl "https://api.vpsbg.eu/v1/servers" \
  --header "Accept: application/json" \
  --header "Authorization: Bearer ${VPSBG_API_TOKEN}"

Do not put tokens in URLs, source control, browser-side code, or logs.

Rotate or revoke a tokenCopy link

Abilities cannot be changed after a token is created. Create a replacement with the required abilities, update the integration, and then delete the old token.

Deleting a token from the API Tokens page revokes it immediately. Revoke a token at once if it is exposed or no longer needed.