To collect data from Trend Micro Vision One APIs, the user must have an API Token. To create an API token, follow the below steps:

1. Log on to the Trend Micro Vision One console.

2. On the Trend Vision One console, go to Administration → API Keys.

3. Generate a new authentication token. Click Add API key. Specify the settings of the new API key:

   • Name: A meaningful name that can help you identify the API key.
   • Role: The user role assigned to the key. API keys can use either predefined or custom user roles. Custom roles can be created by navigating to Administration → User Roles → Add Role. The role must have appropriate API access permissions to fetch relevant data.

   The following table outlines the access permissions to apps and features needed to fetch relevant data from the Trend Vision API:

   Datastream	App	Permissions
   Alert	Workbench	View, filter, and search.
   Audit	Audit Logs	View, filter, and search, Export and Download.
   Detection	Search	View, filter, and search.

   Refer to Account Role Permissions for more details.

   • Expiration time: The time the API key remains valid. By default, authentication tokens expire one year after creation. However, a master administrator can delete and re-generate tokens at any time.
   • Status: Whether the API key is enabled.
   • Details: Extra information about the API key.

   Click Add.

4. Copy the Authentication token.