Skip to main content
Every Spote API request must include an Authorization header with your Personal Access Token (PAT). Tokens start with spote_ and are generated from your Settings page. The raw token value is shown only once at creation time — the server stores only a hashed representation.

​
Getting a token

Generate a Personal Access Token from your Spote Settings page. See Personal Access Tokens for a step-by-step guide.

​
Using the token

Pass the token as a Bearer token in the Authorization header of every request:

​
Token format

Tokens follow the format spote_<32 hex characters>:
Each token value is unique and cryptographically random. Spote stores only a secure hash of the token — never the raw value.

​
Error responses

Tokens are shown only once when generated. If you lose a token, revoke it and create a new one.