Skip to content
/Token Service

Token Server

Overview

The Token Server provides a critical layer of security for web applications that use services requiring a license key. When you integrate a service directly into a public-facing website, there’s a significant risk of exposing your license key within the site’s code. If a malicious actor finds this key, they could potentially use your licensed services without authorization, leading to security breaches or unexpected costs.

To solve this problem, the Token Server acts as a secure intermediary. Instead of placing your main license key in the public code, your private server-side application makes a request to the Token Server. In return, it receives a secure, temporary token with a limited lifespan. This disposable token can then be safely passed to the public website for its use, ensuring that your license key is never exposed.

The Token Server can:

  • Generate secure, temporary authentication tokens for client-side use.
  • Conceal your license key to prevent it from being exposed in public-facing code.
  • Enhance web application security by providing a safer method for authentication.
  • Control the active lifespan of a token, from a minimum of 1 minute up to 99 hours.

Documentation

Support Center

https://www.melissa.com/company/product-support

Download OpenAPI description
token-server.json
token-server.yaml
Languages
Servers
Token Service Server
https://tokenservice.melissadata.net/v3/json/Service.svc/

Token Service

Use this endpoint to request a token for use with Melissa Cloud APIs.

Operations

Request token(s)

Request

Generate a secure, temporary token for use with Melissa Cloud APIs.

Query
IPstring

Optional. This is added security. Specifying an IP Address for tokens will require that any service using the generated token must be sent from the same encoded IP Address.

A mismatch between the encoded token IP Address and the client IP Address will result in a GE13 error.

Lstring(password)required

Required. The License Key issued by Melissa.

Example: L={REPLACE-WITH-YOUR-LICENSE-KEY}
Pstringrequired

Required. Specifies which package(s) the token should be generated for. Delimit multiple packages with a comma ,. Default is all packages.

Cicero
  • CiceroAPI
  • CiceroAPI-Region
Contribution
  • Contribution-Contribution
Data Retriever
  • DataRetriever-Business
  • DataRetriever-Consumer
  • DataRetriever-ConsumerTwo
  • DataRetriever-MAK
  • DataRetriever-NewHomeowners
  • DataRetriever-NewMovers
Druginator
  • Druginator
Global Address Verification
  • GlobalAddressVerification
  • GlobalAddressVerification-Geocode
Global Email
  • GlobalEmail
  • GlobalEmail-Premium
Global Express Entry
  • GlobalExpressEntry
  • GlobalExpressEntry-Geocode
Global IP
  • GlobalIP
Global Name
  • GlobalName
Global Phone
  • GlobalPhone
  • GlobalPhone-CallerID
  • GlobalPhone-GlobalPremium
  • GlobalPhone-NAPremium
IP To Consumer
  • IPToConsumer
LeadGen
  • LeadGen-Business
  • LeadGen-GlobalAddressDatabase
People Business Search
  • PeopleBusinessSearch
Personator Consumer
  • PersonatorConsumer
  • PersonatorConsumer-Append
  • PersonatorConsumer-Demographics
  • PersonatorConsumer-GeoCode
  • PersonatorConsumer-GeoPoint
  • PersonatorConsumer-Move
  • PersonatorConsumer-Verify
Personator Identity
  • PersonatorIdentity
  • PersonatorIdentity-Verify
  • PersonatorIdentity-Watchlist
Personator Search
  • PersonatorSearch
Property
  • Property
  • Property-Shapes
Reverse GeoCoder
  • ReverseGeoCoder
  • ReverseGeoCoder-Geocoder
SmartMover
  • SmartMover-Canada
  • SmartMover-UnitedStates
SSN Name Match
  • SSNNameMatch
Street Route
  • StreetRoute
Vault
  • Vault
WebSmart
  • WebSmart-AddressCheck
  • WebSmart-DeliveryIndicator
  • WebSmart-DPV
  • WebSmart-Email
  • WebSmart-Geocode
  • WebSmart-GeoPoint
  • WebSmart-MultipleRecords
  • WebSmart-Name
  • WebSmart-Phone
  • WebSmart-StreetData
  • WebSmart-ZipSearch
US Business Coder
  • BusinessCoder
  • BusinessCoder-Contacts
Example: P=PersonatorConsumer-Verify,GlobalAddressVerification
TSstring

Optional. Token timespan in the HHMM format. The minimum lifespan is 1 minute (0001), maximum is 99 hours (9900). Default is 5 minutes (0005).

Example: TS=0015
curl -i -X GET \
  'https://tokenservice.melissadata.net/v3/json/Service.svc/RequestToken?L={REPLACE-WITH-YOUR-LICENSE-KEY}&P=PersonatorConsumer-Verify%2CGlobalAddressVerification'

Responses

Token Server Response

Bodyapplication/json
Resultstring

Result codes indicating any errors with the request.

Tokenstring

The requested token to be used.

Response
application/json
{
  "Result": "",
  "Token": "computedToken"
}