API: tokens

List, create and delete API tokens.

API tokens are the keys to this API. You can also create them in the interface, see Create an API key. Deleting a token stops every integration that uses it.

Every endpoint accepts both GET and POST; the heading shows the method the specification lists first. Uploads must use POST. Send your API key in the Access-Token header. The base URL is https://<your-platform>/local/ltisaas/api.php/v1; use v0 with the token dummy to get test data. Error responses are JSON with success: false, error and debuginfo. Authentication, versions and limits are explained in API documentation.

Generated from the LtiSaas API specification 1.0, retrieved 2026-10-30 from dev-auto.

GET /token/list

Get list of API tokens. This endpoint retrieves a list of all API tokens. The result is a list of API tokens with their respective information, such as token, endpoint, name, etc. This can be used for managing or auditing the use of API tokens in the system.

Parameters

This endpoint has no parameters.

Example request

curl -H "Access-Token: <your token>" \
  "https://<your-platform>/local/ltisaas/api.php/v1/token/list"

Example response (200). The list of all public available tokens.

{
  "results": [
    {
      "token": "<your token>",
      "endpoint": "https://<your-platform>/local/ltisaas/api.php/v0/",
      "name": "string",
      "lastaccess": 1688735837,
      "timecreated": 1688393426
    }
  ]
}

Errors: 400 Bad Request, 401 Unauthorized

GET /token/add

Add a new API token. This endpoint creates a new API token. It requires necessary name for creating a new API token. Upon successful operation, a new API token will be added to the system and its details will be returned. In case the API token cannot be created due to certain reasons, appropriate error responses will be returned.

Parameters

Example request

curl -H "Access-Token: <your token>" \
  "https://<your-platform>/local/ltisaas/api.php/v1/token/add?name=<name>"

Example response (200). Returns the identifier of the course.

{
  "success": true,
  "token": "<your token>",
  "endpoint": "https://<your-platform>/local/ltisaas/api.php/v0/"
}

Errors: 400 Bad Request, 401 Unauthorized

GET /token/delete

Delete an API token. This endpoint deletes an API token based on a given token ID. It requires the token of the API to perform this operation. Upon successful deletion, the API token will be removed from the system. In case the token ID is not found or cannot be deleted due to certain reasons, appropriate error responses will be returned.

Parameters

Example request

curl -H "Access-Token: <your token>" \
  "https://<your-platform>/local/ltisaas/api.php/v1/token/delete?token=<token>"

Example response (200). Returns success if the operation was successful.

{
  "success": true
}

Errors: 400 Bad Request, 401 Unauthorized