Interface and Operations / Access Token
Added in version 7.5.0
Access Token is an authentication method that can be used by programs. Using an Access Token, you can conveniently access DataFlux Func programmatically.
Access Token List
Navigate to Management / Access Token to enter the Access Token list, where you can manage Access Tokens.
You can filter Access Tokens using the search box at the top of the page, or click Create to create an Access Token.
The list displays the title, enabled features, validity period, status, creation time, and owning user of each Access Token. Super administrators can manage all Access Tokens, while other users can only manage the Access Tokens they created.
Click Authentication to view the transport method, service URL, and HTTP request headers of the MCP Services. The list also supports enabling, disabling, configuring, or deleting Access Tokens.
Configure Access Token
For each Access Token, you can configure whether specific features are enabled and configure those features.
When creating a new Access Token, you need to fill in a title, which cannot be modified after creation; you can also set the validity period of the Access Token. The access rules for APIs, MCP functions, and MCP programming can be edited manually, or configured using the corresponding Quick Select APIs, Quick Select MCP Functions, or Quick Select MCP Programming Scope.
The application can then authenticate by adding X-Dff-Access-Token to the HTTP request header:
| Text Only | |
|---|---|
1 | |
API Access
When the API Access feature is enabled, HTTP requests carrying this Access Token are allowed to access the specified APIs.
This feature supports configuring a rule list. The system determines whether the current API is allowed to be accessed based on the first matching rule.
You can use * to match any API.
| Example: Only allow access to a specific API | |
|---|---|
1 | |
| Example: Deny access to a specific API, allow all others | |
|---|---|
1 2 | |
APIs that do not match any rule are denied by default
When no rule is matched, access is denied by default.
Therefore, there is no need to add a rule like "Deny all other APIs" at the end of the rule list.
MCP Functions
When the MCP Functions feature is enabled, MCP clients / AI Agents are allowed to call functions in DataFlux Func by carrying this Access Token, and the scope of functions allowed to be accessed can be configured.
Reference Documentation
For complete integration and permission configuration methods for MCP functions, refer to the document MCP Services / MCP Functions
MCP Programming
When the MCP Programming feature is enabled, MCP clients / AI Agents are allowed to write and manage Scripts in DataFlux Func by carrying this Access Token, and the allowed access scope and access mode can be configured.
Reference Documentation
For complete integration and permission configuration methods for MCP programming, refer to the document MCP Services / MCP Programming