API and MCP
API tokens
Create a personal API token and authenticate REST and MCP requests.
REST API and MCP both authenticate with a personal API token.
Create a token
Open Account & API in the interface, enter what the token is for (for example CI deploy or Claude Code) and create it.
The token is shown once, right after creation. Copy it then. Veresk stores only a hash, so a lost token cannot be recovered: create a new one and revoke the old one.
Tokens start with vrsk_. You can have several, each with its own name, and you can revoke any of them individually. The list shows when each was created and last used.
Use a token
Send it in the Authorization header:
curl https://<your-veresk-host>/api/v1/me \
-H "Authorization: Bearer vrsk_..."
GET /api/v1/me returns the owner of the token, which makes it a handy check that a token works.
Permissions
A token has the permissions of its owner. See Access and roles. Tokens cannot issue or revoke other tokens.