My application logs show a warning about needing an API Token. What is it and where do I find it?

The API Access Token authenticates your requests to Pushwoosh. The Pushwoosh SDKs log this warning when no token is supplied at initialization.

There are two token types, and they are not interchangeable:

• Device API token — this is the one your app needs. It authorizes Device API calls (registerDevice, unregisterDevice, setTags, getTags, applicationOpen, postEvent, registerUser, inbox methods, and so on) and is sent in the HTTP header as Authorization: Token <device_api_token>.
• Server API token — used for every other API method (creating messages, editing projects, account operations) and passed in the request body's auth field.

Using the wrong type produces an authentication error.

Where to find or create it

1. Log in to your Pushwoosh Control Panel.
2. Go to Settings → API Access. Tokens are managed at the account level, not inside a single application.
3. Click Generate New Token, choose the type Device, give it a name, and click Generate.
4. Grant the token access to the right application(s) from the API Access list.
5. Copy the value and pass it to the SDK at initialization alongside your application code.

Note: the token shipped with every new account (named Pushwoosh Demo App) is a Server token, so it will not work for SDK/device calls — generate a Device token instead.