Skip to content

Get & use a personal access token

Overview

The primary way to authenticate with the Tallyfy API is using your personal access_token. This token acts on your behalf, granting API requests the same permissions you have within Tallyfy. Simple and straightforward - no OAuth dance required for basic usage.

Getting your personal access token

  1. Log in to your Tallyfy account at https://go.tallyfy.com/.
  2. Navigate to Settings (usually via your profile picture or menu).
  3. Go to the Integrations section.
  4. Select REST API.
  5. Your personal access_token will be displayed here. Copy it securely.

Token Invalidation on Logout

Important: Your personal access token is automatically invalidated and regenerated every time you log out of Tallyfy. This is a security feature that can impact your integrations.

What causes token invalidation:

  • Manual logout from the web interface
  • Automatic session timeout after inactivity
  • Browser clearing cookies/sessions
  • Switching between multiple Tallyfy organizations
  • Password reset operations

Impact on automations:

  • All API calls using the old token will return 401/403 errors
  • Automations will stop working immediately
  • You’ll need to manually update the token in all integrations

Best practices for stable API access:

  1. Dedicated service accounts - Create a specific user for API integrations who never logs out
  2. Error handling - Implement 401/403 detection with alerts for token refresh
  3. Token monitoring - Track token validity and alert on unexpected changes
  4. Document dependencies - Keep a list of all systems using each token
  5. Consider OAuth flow - For production systems, use OAuth with refresh tokens
  6. Enterprise options - Contact support about application tokens that don’t expire on logout

Using your token in API requests

Once you have your token, you need to include it in the Authorization header of every API request you make. The format is Bearer {your_access_token}.

You also need to include two other standard headers:

  • Accept: application/json (Tells the API you expect a JSON response)
  • X-Tallyfy-Client: APIClient (Identifies the request as coming from a custom API client - don’t forget this header or you’ll get 401s)

Here’s how to add these headers in different languages:

const accessToken = 'YOUR_PERSONAL_ACCESS_TOKEN';
const orgId = 'YOUR_ORGANIZATION_ID';
const apiUrl = `https://go.tallyfy.com/api/organizations/${orgId}/me/tasks`; // Example endpoint
const headers = new Headers();
headers.append('Authorization', `Bearer ${accessToken}`);
headers.append('Accept', 'application/json');
headers.append('X-Tallyfy-Client', 'APIClient');
fetch(apiUrl, {
method: 'GET',
headers: headers
})
.then(response => {
if (!response.ok) {
throw new Error(`HTTP error! status: ${response.status}`);
}
return response.json();
})
.then(data => {
console.log(data);
})
.catch(error => {
console.error('Error fetching data:', error);
});

Remember to replace YOUR_PERSONAL_ACCESS_TOKEN and YOUR_ORGANIZATION_ID with your actual Tallyfy values. (And please don’t copy-paste these placeholders into production - we’ve all been there, but it’s never fun to debug.)


Open Api > API code samples

The Tallyfy REST API documentation provides code samples across multiple programming languages for integrating with the platform using proper authentication headers and base URL endpoints.

Open Api > Integrate with Tallyfy using the API

Tallyfy provides a comprehensive REST API that enables developers to integrate workflow functionality into external applications using two authentication methods - user-based tokens for personal integrations and application-based OAuth credentials for third-party applications - while supporting features like token refresh automatic retry logic and webhook capabilities for event-driven integrations.

Code Samples > Authentication methods

The Tallyfy API requires proper authentication through personal access tokens or OAuth flow along with specific headers to enable secure platform access and custom integrations.

Integrations > Open API

The Tallyfy REST API enables developers to build custom integrations with full platform functionality through three authentication methods (user tokens application tokens and OAuth) while providing comprehensive access to process management task operations user administration and data export capabilities with standard JSON responses and reasonable rate limits.