Skip to content

docs: document how Standby handles the API token #3094

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
vdusek merged 3 commits into from
Oct 20, 2026
Merged

docs: document how Standby handles the API token #3094

Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
5fc0a11
docs: note that Standby removes the API token before forwarding
vdusek Oct 19, 2026
d243e1b
docs: point Standby Actors to the APIFY_TOKEN env var
vdusek Oct 20, 2026
4abc3d8
docs: address the APIFY_TOKEN note to Standby Actor developers
vdusek Oct 20, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 4 additions & 0 deletions sources/platform/actors/running/actor_standby.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -47,6 +47,10 @@ This approach can be useful if you cannot modify the request headers.
https://rag-web-browser.apify.actor/search?query=apify&token=my_apify_token
```

The platform removes the token from the request before forwarding it, so the token doesn't reach the Actor's code. If the Actor reads the `Authorization` header for its own authentication, send your Apify token in the `X-Apify-Authorization` header instead.

If you're developing a Standby Actor, use the token from the `APIFY_TOKEN` [environment variable](../development/programming_interface/environment_variables.md#system-environment-variables) to call the Apify API, as in any other Actor.

:::tip Scoped tokens
You can use [scoped tokens](/integrations/api#limited-permissions) to send standby requests. This is useful for allowing third-party services to interact with your Actor without granting access to your entire account.

Expand Down
Loading