Skip to content

Interface and Operations / Access Token

Added in version 7.5.0

Access Token is an authentication method that can be used by programs. Using an Access Token, you can conveniently access DataFlux Func programmatically.

Access Token List

Navigate to Management / Access Token to enter the Access Token list, where you can manage Access Tokens.

access-token-list.png

You can filter Access Tokens using the search box at the top of the page, or click Create to create an Access Token.

The list displays the title, enabled features, validity period, status, creation time, and owning user of each Access Token. Super administrators can manage all Access Tokens, while other users can only manage the Access Tokens they created.

Click Authentication to view the transport method, service URL, and HTTP request headers of the MCP Services. The list also supports enabling, disabling, configuring, or deleting Access Tokens.

Configure Access Token

For each Access Token, you can configure whether specific features are enabled and configure those features.

When creating a new Access Token, you need to fill in a title, which cannot be modified after creation; you can also set the validity period of the Access Token. The access rules for APIs, MCP functions, and MCP programming can be edited manually, or configured using the corresponding Quick Select APIs, Quick Select MCP Functions, or Quick Select MCP Programming Scope.

The application can then authenticate by adding X-Dff-Access-Token to the HTTP request header:

Text Only
1
X-Dff-Access-Token: atk-xxxxx:xxxxx

access-token-setup.png

API Access

When the API Access feature is enabled, HTTP requests carrying this Access Token are allowed to access the specified APIs.

This feature supports configuring a rule list. The system determines whether the current API is allowed to be accessed based on the first matching rule.

You can use * to match any API.

Example: Only allow access to a specific API
1
GET /api/v1/func/overview
Example: Deny access to a specific API, allow all others
1
2
!GET /api/v1/func/overview
*

APIs that do not match any rule are denied by default

When no rule is matched, access is denied by default.

Therefore, there is no need to add a rule like "Deny all other APIs" at the end of the rule list.

MCP Functions

When the MCP Functions feature is enabled, MCP clients / AI Agents are allowed to call functions in DataFlux Func by carrying this Access Token, and the scope of functions allowed to be accessed can be configured.

Reference Documentation

For complete integration and permission configuration methods for MCP functions, refer to the document MCP Services / MCP Functions

MCP Programming

When the MCP Programming feature is enabled, MCP clients / AI Agents are allowed to write and manage Scripts in DataFlux Func by carrying this Access Token, and the allowed access scope and access mode can be configured.

Reference Documentation

For complete integration and permission configuration methods for MCP programming, refer to the document MCP Services / MCP Programming