API tokens

API tokens let scripts, webhooks, and other integrations use the MX public API on your behalf. This page shows how to create, use, and revoke a token.

Create a token

1. Open Integrations from the user menu at the bottom of the sidebar.
2. In Your API tokens, click Create token.
3. Give the token a Name so you know what it is for (for example, “Reporting script”).
4. Pick its Scopes: read to fetch data, write to make changes. Choose at least one.
5. Choose when it Expires: 30 days, 90 days, 365 days (the default), or no expiry.
6. Click Create token.

MX shows the full token once, right after you create it. Copy it now and store it somewhere safe. MX never stores the plaintext, so once you close the dialog you cannot see it again - only the prefix is kept in your token list.

Caution

Treat a token like a password. Anyone with it can act as you through the API. Do not paste it into shared documents, commit it to code, or send it to anyone outside your organization.

Use it

Send the token in the Authorization header as a Bearer token. MX tokens start with mx_.

curl -H "Authorization: Bearer mx_your_token_here" \
  https://app.mxbrandcopy.com/v1/brands

See the API reference for available endpoints and response format.

Revoke a token

If a token is no longer needed or may have leaked, revoke it. In Your API tokens, find the token and click Revoke, then confirm. The token stops working on its next request. Revoking cannot be undone - create a new token if you need one again.

You can also review a token’s activity: click Activity on a row to see the changes made with that token.