Request a Canvas API token

On this page:

About Canvas API tokens

Canvas has a robust API that can be used to retrieve, create, edit, and delete Canvas data. End users may not access the API directly. Instead, Indiana University has deployed a proxy server through which all API requests are routed. If you want to use the API, you must request a token for the proxy server.

Proxy tokens grant you the same level of access as you normally have in Canvas. For example, if you are an instructor, your proxy token will allow you to retrieve, add, update, and delete data in your own classes via the API, but you will not have access to classes in which you are not enrolled.

Request an API token

  1. Log into Canvas and, on the left, click Account.
  2. In the resulting Account menu, click Settings.
  3. Click New Access Token.
  4. In the Canvas API Token Request form, fill out all required information. Be sure to give detailed information under "For what purpose do you need a Canvas API token?" Access tokens will not be issued without clear information about how the token will be used.
  5. Once you've filled out the form, click Submit. Canvas administrators will review your request, and you may be contacted if more details are needed.
  6. When the review is complete, you'll receive a notification with the status of your request. If approved, the Canvas administrator will transmit your tokens to you via Slashtmp. You'll receive separate tokens for the Canvas production, test, and beta environments; a token will only work on the environment for which it was created. For more about the test and beta environments, see below.

Access the Canvas API via the proxy server

In order to use the token, your API calls or scripts must include two custom headers, an authorization header and a content type header. Set up each header using the values below:

Name Value
Authorization header X-IU-Authorization
(Use the entire string, including the front portion which contains your name, for [your_token].)
Content type header Content-Type application/json

When making an API request through IU's proxy server, replace the endpoint prefix for direct API access with the prefix in the right-hand column of the following table.

Direct API access
API access via the proxy server
Sample request

Exercise caution when taking any action that modifies data in Canvas. UITS recommends testing your API calls and scripts in IU's test or beta environment for Canvas. The test environment has the same code base as production, while Canvas beta includes code for features that have not yet been released. To access these environments, use:

  • Canvas test instance
    • Direct access:
    • Proxy prefix:
  • Canvas beta instance
    • Direct access:
    • Proxy prefix:

This is document aaja in the Knowledge Base.
Last modified on 2018-01-25 13:55:09.

  • Fill out this form to submit your issue to the UITS Support Center.
  • Please note that you must be affiliated with Indiana University to receive support.
  • All fields are required.

Please provide your IU email address. If you currently have a problem receiving email at your IU account, enter an alternate email address.

  • Fill out this form to submit your comment to the IU Knowledge Base.
  • If you are affiliated with Indiana University and need help with a computing problem, please use the I need help with a computing problem section above, or contact your campus Support Center.

Please provide your IU email address. If you currently have a problem receiving email at your IU account, enter an alternate email address.