Cortex XDR API for viewing/setting temporary endpoint token

[tmeksik]

Hi team - Wondering if such an API exists?

Thanks!

[susekar]

Hello @tmeksik ,

Greetings for the day.

Yes, Cortex XDR supports APIs for managing endpoint tokens. These temporary tokens can be used for administrative actions such as endpoint uninstallation or troubleshooting without using the permanent agent uninstall password.

Supported Platforms:

• Windows and macOS only
• Cortex XDR server 3.3+ and agent 7.7.1+

API Capabilities:

• Generate temporary endpoint tokens with an expiry of 1–21 days.
• Retrieve the token associated with a specific token hash.

Required Permissions:

• Editor: Generate or set temporary tokens.
• Viewer: Retrieve existing tokens.

For manual verification on an endpoint, run: cytool token query

If you feel this has answered your query, please let us know by clicking like and on "mark this as a Solution".

Thanks & Regards,
S. Subashkar Sekar