H Home
Advanced

This page is for sync integration, not the main public workspace flow.

Keep everyday browsing, search, import, and maintenance on the home page. Use this page only when Chrome sync or automation requires a token-backed integration.

Chrome extension The extension still sends X-API-Token to /api/bookmarks/sync, so token support remains part of the backend contract.
Public mode guardrail To avoid exposing token creation to all visitors, web token management is disabled by default and this page focuses on status and guidance.
Status

Current web token management status

Checking current configuration...

Back to home
Guide

How to enable sync tokens safely

1. Keep it off by default A public bookmark site should not expose token creation to every visitor.
2. Opt in explicitly Only in a controlled environment, set PUBLIC_API_TOKEN_MANAGEMENT to enabled.
3. Scope tokens per tool Create separate tokens for separate automations so revocation stays simple.
4. Configure the extension here The Chrome popup still points users to this page for service URL and token setup guidance.
Import bookmarks Check links