Skip to content
OrionOrion Docs

Authentication

Every Orion account has a personal API token that grants read and write access to that account’s data through the machine endpoints. It’s what the Android widgets, the calendar feed, and the Home Assistant integration use.

Get your token

Section titled “Get your token”

Open Settings → For developers in Orion. Your token is shown under API token (generated automatically the first time you look).

Use it

Section titled “Use it”

Send it either as a bearer token or a query parameter:

Terminal window
# Header (preferred)
curl -H "Authorization: Bearer <token>" https://orionmedia.app/api/machine/summary


# Query parameter (for places that can't set headers, e.g. calendar apps)
curl "https://orionmedia.app/api/machine/summary?token=<token>"

Requests without a valid token get 401 Unauthorized.

Keep it secret, rotate it if leaked

Section titled “Keep it secret, rotate it if leaked”

The token acts on your account without a password, so treat it like one. If it leaks, hit Regenerate token in Settings → For developers. The old token stops working immediately. You’ll then need to update it everywhere it’s used: