FileMaker Data API authentication and session tokens

Intermediate

Learn how to authenticate against the FileMaker Data API, get a session token, and use it for subsequent requests — including when and how to log out.

What you'll learn

How to request a session token from the FileMaker Data API
How to include the token in subsequent API requests
How to properly end a session to free server resources

The FileMaker Data API uses token-based authentication. You POST your credentials to get a session token, include that token in subsequent requests, and DELETE the token when finished. Understanding this lifecycle prevents session leaks that exhaust your server connection limit.

1/4

Request a session token

POST to /fmi/data/v1/databases/{database}/sessions with your credentials in a Basic Auth header. The response body contains the token.

JSON

// POST /fmi/data/v1/databases/MyDatabase/sessions
// Header: Authorization: Basic base64(username:password)
// Header: Content-Type: application/json
// Body: {}

// Response:
// {
//   "response": { "token": "eyJh..." },
//   "messages": [{ "code": "0", "message": "OK" }]
// }

All Data API lessons Creating records with the FileMaker Data API