Master Account Holders (MAH) and Master Administrators (MA) can generate a secret token that is used to authenticate the Rescue user and to prevent them from logging out if there is a timeout. This feature serves the same purpose as the requestAuthCode API call, but this code is shown to the MAH or MA only upon creation and will not be visible once they leave the page, thus increasing security.

1. To generate an API token, select the Global Settinggs tab in the Administration Center.
2. Under Generate API token, click Generate and Copy

   Result: A new API token is generated, displayed, and automatically copied to your clipboard.

3. Optionally, select either or both from the following restrictions.
   • Select Deny access to the requestAuthcode endpoint to force your users to use the token obtained from Generate API token in API calls that require an AuthCode.
     Important: Users will not be able to use the requestAuthCode API endpoint.
   • Select Deny access to the login endpoint to stop users from being able to log in via the login API call.
     Remember: Users will still be able to use the Rescue website login.