Notes on api-token