Overview of FDM Monster API Key Features
FDM Monster (version 2.1.0 and later) supports user-managed API keys for programmatic server access. These keys allow authentication without session cookies, making them suitable for scripts and third-party integrations. Key characteristics include:
- Format: Tokens follow the
fdmm_api_<43 chars base64url>format with SHA-256 verification. - Permissions: Keys are user-bound and inherit the permissions of the user who created them.
- Auditability: Usage is tracked via
lastUsedAttimestamps. - Revocation: Access can be revoked by deleting the key.