Skip to main content

Write Only API Token

  • September 7, 2022
  • 4 replies
  • 25 views

Forum|alt.badge.img

I would like to have visitors to my website signup for mailing list , and submit email address direct to my Airtable from HTML web form.

I can successfully do all that now, BUT the same API token can be used to READ the entire table…

How can my API token be used to submit data from web, but not allowed to read whole table?

4 replies

kuovonne
Forum|alt.badge.img+29
  • Brainy
  • 6009 replies
  • September 7, 2022

Welcome to the Airtable community! Airtable API tokens currently do not have this level of permission granularity.

You can look into using an Airtable form for users to submit their email addresses. Forms create new records without allowing any access to the base.


Forum|alt.badge.img
  • Author
  • New Participant
  • 1 reply
  • September 7, 2022

Welcome to the Airtable community! Airtable API tokens currently do not have this level of permission granularity.

You can look into using an Airtable form for users to submit their email addresses. Forms create new records without allowing any access to the base.


Thank you. Is it possible for me to POST directly to an Airtable Form endpoint ?
Or do I have to use the Airtable Form ?


kuovonne
Forum|alt.badge.img+29
  • Brainy
  • 6009 replies
  • September 7, 2022

Thank you. Is it possible for me to POST directly to an Airtable Form endpoint ?
Or do I have to use the Airtable Form ?


No. You can POST to a table, but that would require an API key that also has read capability.


Freundschaft
Forum|alt.badge.img+1
  • New Participant
  • 1 reply
  • January 4, 2023

it would be very useful to have write only tokens, as we often need to insert new records, e.g. from input forms, but dont want to provide these endpoints with read capabilities to retrieve the data of all other entries