generated: '2026-07-19'
method: searched
source: https://docs.hosted.ai/user-panel/faqs/api-faqs
docs:
- https://docs.hosted.ai/user-panel/account-settings-22t5_c/security/manage-api-tokens
- https://docs.hosted.ai/user-panel/faqs/api-faqs
summary:
  types:
  - http
  - oauth2
  http_schemes:
  - bearer
  oauth2_flows:
  - authorizationCode
  api_key_in:
  - header
schemes:
- name: bearerToken
  type: http
  scheme: bearer
  description: >-
    Primary authentication for the Admin Panel and User Panel REST API. Users
    create a named API token in the User Panel (Account Settings > Security >
    Manage API Tokens) and pass it as an HTTP bearer token. Base URL is per
    deployment at https://USER_PANEL_URL/api. The full token value is displayed
    once at creation, then obfuscated. Tokens carry a configurable expiry
    (short- or long-term) and an optional IP allowlist (single IP or range).
  header: 'Authorization: Bearer [example key]'
  token_creation: User Panel > Account Settings > Security > Manage API Tokens
  token_expiry: configurable per token
  ip_allowlist: optional single IP or IP range per token
  sources:
  - https://docs.hosted.ai/user-panel/faqs/api-faqs
- name: marketplaceOAuth
  type: oauth2
  description: >-
    OAuth authorize flow recommended for new marketplace integrations (linking
    marketplace pods/tokens). Plaintext marketplace token linking is marked
    legacy as of Admin Panel 2.4.1 and OAuth is the recommended path forward.
  flows:
  - flow: authorizationCode
  sources:
  - https://docs.hosted.ai/releases-notes/release-api-changelogs/admin-panel/241-api-changelogs
notes:
- >-
  A 401 Unauthorized is documented as an authentication failure; the docs
  recommend creating a new unrestricted token when troubleshooting 401s.