How to issue an API token for the sites builder
A site built in the sites builder gets data from RentProg using a token: the list of branches, vehicle categories and the catalog. The token gives read-only access to this data — nothing in RentProg can be changed with it.
Who has access
Tokens work only if the sites builder is included in the company's subscription plan. The trial period does not unlock this access. Outside the trial period, the panel cannot be expanded without the service, and tokens already issued stop working. During the trial, you can expand the panel, but without the service it shows “Sites Builder is not included in your current plan.”
Users with the “Manager”, “Branch manager”, and “Main Administrator” roles can create and revoke tokens. Other users can view the token list for the company or branch they have access to.
How to create a token
- Open the company profile, the “Integrations” tab, and expand the panel labeled “Sites builder — API tokens”.
- Click “Create token”.
- Enter a “Token name”, for example the site's name, and confirm creation.
- Copy the token in the “Token created” window using the copy icon.
- Click “I copied the token”.
Important
Copy the token now — after the window is closed, it will not be shown again. RentProg stores not the token itself but only its fingerprint and last four characters. A lost token cannot be restored: issue a new one and revoke the old one.
A token issued in the panel has the “Main company” level: a site using it sees all branches of the company group.
List of tokens
| Column | What it shows |
|---|---|
| Name | The name you gave the token |
| Last 4 | The last four characters of the token |
| Level | “Main company” or “Branch” |
| Status | “Active” or “Revoked” |
| Created | When it was issued |
| Last used | When the site last made a request with the token |
How to revoke a token
- Click the delete icon in the token's row.
- Confirm in the “Revoke token?” window with the “Revoke” button.
Revocation cannot be undone: a site with this token loses access immediately. A revoked token stays in the list with the “Revoked” status.
What the site gets with the token
The site sends the token in the Authorization: Bearer rps_… header and can request:
- branches — name, city and number of active vehicles;
- categories — the classes assigned to active vehicles;
- catalog — active vehicles that are not archived, excluding demo ones: name, class, base price, currency, year, transmission, fuel.
The catalog is returned in pages, 50 records by default, no more than 200 per request. The rate limit is 60 requests per minute per token.