Who can see the Lead API token?

Only the account owner can reveal or regenerate the account API token and mint scoped credentials, at https://app.closemagnet.com/settings/api. Other members can open the API tab and see the Client ID and whether the token exists, but not its value.

That page holds three things: the Client ID, which identifies the account and is not a secret; the account API token, created automatically when the account started; and any scoped credentials minted for a single integration or agent. Any member who can open a campaign can read its Manage Leads via API docs; the token is filled into the samples only for someone allowed to reveal it.

If a request returns 401, ask the account owner for the current token and retry with it in the Authorization header, as the word Bearer, then one space, then the token. Send the token itself, never a placeholder: a scoped credential begins cmk_ and is 68 characters long, and the account API token is a 64-character string with no prefix. Every route and the scope it needs is listed in the API reference, reachable from the avatar menu.

Links to the app require your CloseMagnet login.