With a personal access token, your own programs access your account through the Account API, and an AI agent works with your data over MCP. You decide which account the token applies to, which permissions it has, and how long it stays valid.
Prerequisites
- The account includes the API access feature. It is part of the Trial and the Enterprise plan. Without it, Jupiter ERP shows "Personal access tokens require the API access feature (Trial or Enterprise)."
Create a token
- Open the user menu, then Settings → API & MCP, tab API tokens.
- Click New Token.
- Enter a Name you will recognize later, for example "Accounting export script".
- Optional: set an Expiration date. Leave it empty for no expiration.
- Choose the Account. The token's permissions apply to this account only.
- Choose the Permissions. You can only grant permissions you have in the account yourself. Grant only what the application really needs.
- Read the privacy notice and tick I have read this notice and confirm it.
- Click Create, then Copy Token. The token is shown only now.
Use a token
- Account API: Every request sends the token in the
Authorization: Bearer …header and the account UUID asX-Account-Uuid. The endpoints are in the Account API reference. The link Documentation for the API and MCP is also on the token page. - MCP: How to connect an agent is described in Connect an agent.
Treat a token like a password. Store it only in trusted systems, for example as an environment variable, and never in source code or emails.
Review and delete tokens
The list shows each token's Name, Account, Permissions, and Expiration date. Show permissions lists all permissions in detail. Delete revokes a token. Applications and agents using it lose access immediately.
Tip: Create a separate token for each integration. You can then revoke one without affecting the others.
Common problems
"This account does not include API access. Choose a Trial or Enterprise account."
The selected account has neither a Trial nor the Enterprise plan. Choose another account or change the plan under System → Subscription.
The API rejects requests (HTTP 401 or 403).
The token lacks the required permission, has expired, or belongs to a different account than the UUID in the header. Check the details in the token list.
I accidentally published a token.
Delete it immediately and create a new one.
