import Tabs from @theme/Tabs; import TabItem from @theme/TabItem; # Your SignalWire API Space ## Overview {#overview} The API credentials found on this page are your key to accessing SignalWires APIs and SDKs. Most SignalWire API endpoints require authentication using [HTTP Basic Auth](http://en.wikipedia.org/wiki/Basic_access_authentication). HTTP Basic Authentication requires you to send an Authorization header with your Project ID and API Token. This should be supported in almost all HTTP clients. Each project has its own Project ID and API Authentication Tokens you will need to use when making a request to the API. Some methods will also require you to pass your Space URL. - **Project ID:** Use this UUID to specify your project to the API. - **Space URL:** Use this URL to access SignalWire APIs. The Space name is used to access a space-specific endpoint. - **API Tokens:** Authentication tokens to access the API. You can have multiple tokens for each project. :::info API Authorization Tokens vs Video and Chat SDK Tokens API tokens are protected and used server-side to access the API. The tokens we refer to when using Video or Chat products in the browser are not the same tokens we generate and store here. In fact, you will use your API token when calling an endpoint to request a Video Room or Chat token. See more on these tokens in our [Simple Video Demo](/video/getting-started/simple-video-demo) and [Simple Chat Demo](/chat/getting-started/get-started-with-a-simple-chat-demo). ::: ## Generating a new API Token {#generating-a-new-api-token} To generate a new API token, click the blue + New button. A New API Token form will open. Give your token a descriptive name to help differentiate it in logs and for debugging. You may choose a limited set of RELAY permissions scopes to allow this token to only access the scopes necessary for a specific application. When you are finished, click Save to return to your list of existing tokens. You can edit the token name and allowed scopes later by clicking the **⋯** button and selecting Edit. You may also delete a token from the same dropdown menu or the Edit page. ## Using API Tokens {#using-api-tokens} :::caution Token Security It is important that the API tokens are kept confidential. They can be used to make API requests on your behalf. Take extreme care to make sure that the tokens dont get pushed to GitHub. Make sure that the tokens arent publicly accessible. For Node.js backend, you can use [dotenv files](https://www.npmjs.com/package/dotenv) or similar mechanisms paired with a [gitignore file](https://git-scm.com/docs/gitignore) to safely store confidential constants. ::: All API requests must be made with proper authentication over HTTPS. Calls made over plain HTTP or without auth will fail. You can find the correct credentials structure for each specific call in the [SDK Reference](/sdks/reference/realtime-sdk), [REST API Reference](/rest), or in a specific [Guide](/guides/) you may wish to follow. For a general example, we can look at how to list video rooms with the **REST API**: shell curl https://.signalwire.com/api/video/rooms \ -u : We use the external dependency [Axios](https://axios-http.com/) to make this call, so it must also be imported and installed. javascript // npm install axios import axios from axios; await axios .get(https://.signalwire.com/api/video/rooms, { auth: { username: , password: }, }) .then((response) => { console.log(JSON.stringify(response.data)); }) .catch((error) => { console.log(error); }); Or with the **Realtime SDK**, you may use these credentials to create a Video Client. javascript import { Video } from @signalwire/realtime-api; const video = new Video.Client({ project: , token: , }); Note that you are not required to pass the Space URL when working with the SDK.
.default})
- **Project ID:** Use this UUID to specify your project to the API. - **Space URL:** Use this URL to access SignalWire APIs. The Space name is used to access a space-specific endpoint. - **API Tokens:** Authentication tokens to access the API. You can have multiple tokens for each project. :::info API Authorization Tokens vs Video and Chat SDK Tokens API tokens are protected and used server-side to access the API. The tokens we refer to when using Video or Chat products in the browser are not the same tokens we generate and store here. In fact, you will use your API token when calling an endpoint to request a Video Room or Chat token. See more on these tokens in our [Simple Video Demo](/video/getting-started/simple-video-demo) and [Simple Chat Demo](/chat/getting-started/get-started-with-a-simple-chat-demo). ::: ## Generating a new API Token {#generating-a-new-api-token} To generate a new API token, click the blue + New button. A New API Token form will open. .default})