surveyor api Token restricted access