Loading...
Authentication
The Nomid MDM API uses API keys to authenticate requests. This guide explains how to obtain and use your API key.
Overview
API keys are used to authenticate all requests to the Nomid MDM API. Include your API key in the X-API-Key header with every request.
Request Headerhttp
X-API-Key: nm_acme_a1b2c3d4e5f6g7h8i9j0...Getting Your API Key
API keys are created and managed through the Nomid Portal. Follow these steps to create your first API key.
Prerequisites
- A Nomid MDM account with administrator access
- Access to the Company Settings in the Nomid Portal
1
Log in to the Nomid Portal
Open your browser and navigate to the Nomid Portal. Sign in with your administrator credentials.
portal.nomid.tech2
Navigate to Integrations
Once logged in, go to the Company Settings section and select the Integrations tab.
Company Settings → Integrations
3
Click Create API Key
Click the "Create API Key" button located in the top-right corner of the Integrations page.
4
Enter a Name
In the modal that appears, enter a descriptive name for your API key. This helps you identify the key later (e.g., "Power BI Integration" or "CRM Sync").
5
Copy Your Key
After clicking Create, your API key will be displayed. Click the copy button to copy it to your clipboard. The key will only be shown once!
Important: Save Your Key
Your API key will only be displayed once at the moment of creation. Copy it immediately and store it securely (e.g., in a password manager or environment variable). If you lose the key, you'll need to create a new one.
API Key Format
API keys follow this format:
nm_{company}_{random_32_chars}
nm_- All keys start with 'nm_'{company}- Company-specific prefix for identification{random}- 32 random characters for security
Using Your API Key
Include the API key in the X-API-Key header with every request:
curl -X GET "https://api.nomid.tech/emm/api/v1/assets" \
-H "X-API-Key: nm_acme_a1b2c3d4e5f6..."Permissions
API keys can be configured with specific permissions:
| Permission | Description |
|---|---|
| DEVICES_READ | Read device information |
| POLICIES_READ | Read policy information |
| EXPORT_READ | Export data |
Security Best Practices
Never expose API keys in client-side code or public repositories
Rotate keys regularly and revoke unused keys
Store keys in environment variables, not in code
Use the minimum permissions necessary for your integration
Revoking API Keys
If you suspect your API key has been compromised or is no longer needed, you can revoke it immediately from the Company Settings > Integrations page in the Nomid Portal. Revoked keys cannot be restored.