title: NetBox: API tokens
agents: netbox
catalog: app/netbox
license: GPLv2
distribution: check_mk
description:
 Overview of the NetBox API tokens from {/api/users/tokens/}: how many exist and
 are enabled, which ones have expired, which were never used, and how many days
 remain for the token that expires soonest - that is the one that will break an
 integration first. An expired token is {CRIT} and fewer than 14 days remaining
 is {WARN} by default.

 The service details list every token (user, description, expiry, last use), and
 the line of a token that has expired or is close to expiring carries a {(!)} or
 {(!!)} marker so it can be found directly in a long list.

 Optionally, the longest-unused token can be flagged to help revoke stale
 credentials; that check is unset by default.

 Only token metadata is read. NetBox does not return other users' key material
 and this plugin never stores any. Listing other users' tokens requires an
 administrator token; the check is opt-in.

discovery:
 One service per host when token monitoring is enabled in the special agent
 rule.
