Your program’s administrative users can generate and manage API tokens to experiment with or use the HackerOne API. The API token identifier and value are used as the username and password for HTTP Basic authentication.
To generate an API token:
Go to Settings > Program > Automation > API.
Click Create API Token.
Enter an identifier for the new API token.
Store the generated API token.
Click I have stored the API Token.
Click Manage groups next to the API token you just generated.
Select which groups you want to give permissions to. When a group isn’t selected, they only have read-only permissions. The default groups you can choose from are:
Option
Details
Standard
This group has Report and Reward permissions.
Admin
This group has Admin and Program permissions.
If your program has more groups, you can choose from those groups as well.
Once you've generated your API token, you'll receive a confirmation email stating that you’ve created a new API token. To learn more about the HackerOne API, check out our API docs.
