Personal access token
Optimizely's REST API lets you create and manage Optimizely Web Experimentation projects and experiments and analyze results from other applications.
For example, Optimizely's partners and technology partners use the REST API to
- Create audiences based on information collected from your Data Management Platform.
- Manage Optimizely Web Experimentation projects from an internal system.
- Pull results data into an internal dashboard or results widget.
- Send email alerts when certain results are achieved.
To use the Optimizely API, you need to authenticate by generating an API token.
Collaborator role permissions
Administrators can generate and revoke personal tokens for all other users in their accounts.
Administrators
- Generate personal tokens for any collaborator in the Optimizely account they administer.
- Revoke personal tokens generated for any collaborators in their account, at any time.
- View a list of all active tokens in an account.
Editors, Project Owners, and Viewers
- Generate personal tokens for themselves.
- Revoke their own personal tokens, at any time.
- View the active tokens that they have generated for themselves.
Generate a token
To generate a personal token in Optimizely
- Go to Profile > API Access and click Generate New Token.
- Enter a token name and click Create.
- If you are an administrator, you can create tokens for other collaborators on the account. Use the dropdown menu to select a collaborator. If you are not an administrator for the account, you can only generate a personal token for yourself.
- Copy the token.
For security purposes, when you navigate away from the API Access tab, the token is no longer be visible when you return. If you need a token, generate a new one.
Keep your tokens secret. Treat them like passwords. If you need a new one, revoke or delete the token and generate another.
Revoke a token
Revoking a token permanently removes it, so you can no longer use it to connect to the Optimizely API . If you are an administrator, you can revoke any personal token attached to the account. If you are not an administrator for the account, you can only revoke the tokens that you generate for yourself.
To delete a token
- Go to Profile > API Access.
- Under Personal Access Tokens, click Revoke.
- Click Delete Token to confirm. You cannot undo this action.
Authenticate with your access token
To authenticate, use a token generated from the instructions above in the request header, as shown in the example below. All API request examples in this documentation use the same header.
curl -H "Authorization: Bearer abcdefg123456" \
"https://api.optimizely.com/v2/projects"You can also write applications that authenticate with the Optimizely API with OAuth 2.0. For more details on connecting applications via OAuth 2.0, see the OAuth 2.0 documentation.
Using the wrong token fails with error 403 - Authentication Failed. If you forget to add the token or set the token on the wrong header or on the body, the request fails with 401 - Unauthorized.