Accessing the REST API from a droplet without access token

September 18, 2016 141 views
API DigitalOcean

Hi all

While in general it is necessary to specify an access token to access the DigitalOcean REST API, I wanted to ask whether there is some way to access the API without an access token when the access is done from a droplet (similar to the Metadata API)?

I'm asking since I have some tools which run directly on a droplet and which access the DigitalOcean API and, if possible, I would like to avoid having to pass my access token to those tools.

Thanks in advance for any help.

1 Answer
eris MOD September 18, 2016
Accepted Answer

You do need a token in order to access the API for your account. If that wasn't the case, then anyone who gains access to one of your droplets could have access to the entire account. This is a pretty big security risk, and would make our service unusable for resellers and the like, so the token is always necessary no matter where you're accessing the API from.

  • Thanks for the quick reply. And, of course, I totally understand the reasoning from a security point of view.

Have another answer? Share your knowledge.