A unique API token is assigned to each Carbon Black Hosted EDR user. It serves as the key authentication mechanism for making calls to the APIs. A user can reset their API token at any time.

Carbon Black Hosted EDR has RESTful APIs that can be used to create custom scripts for interactions with its features. These are described at https://developer.carbonblack.com/reference/enterprise-response/.

Note: When a user’s API token is reset, any affected custom scripts or integrations that use the API token must also be updated.


  1. On the navigation bar, click Username > My Profile.
  2. In the My Profile window, click API Token.
  3. Click the Reset API Token button.