# API and Customer Token **URL:** \ **Category:** Cloud\ **Created:** [January 4, 2023, 5:56am UTC](https://community.particle.io/t/api-and-customer-token/63782 "2023-01-04T05:56:44Z")\ **Posts on this page:** 3\ **Page:** 1
**Author:** ![oraclerouter](https://sea2.discourse-cdn.com/flex026/user_avatar/community.particle.io/oraclerouter/32/30494_2.png) [@oraclerouter](https://community.particle.io/u/oraclerouter)\ **Post date:** [January 4, 2023, 5:56am UTC](https://community.particle.io/t/api-and-customer-token/63782/1 "2023-01-04T05:56:44Z")
Just want to make sure I got this right. Customers that claimed a device that belongs to a product can access most of the [https://api.particle.io/v1/devices](https://api.particle.io/v1/devices) APIs but they are not allowed to access product and organization endpoints via [https://api.particle.io/v1/products/:productId/devices](https://api.particle.io/v1/products/:productId/devices) APIs. ---
**Author:** ![rickkas7](https://sea2.discourse-cdn.com/flex026/user_avatar/community.particle.io/rickkas7/32/8681_2.png) [@rickkas7](https://community.particle.io/u/rickkas7)\ **Post date:** [January 4, 2023, 10:09am UTC](https://community.particle.io/t/api-and-customer-token/63782/2 "2023-01-04T10:09:19Z")
Customer access tokens cannot use any of the product or organization endpoints. They also can only access a small subset of the user API, such as function and variable in the device endpoint. Most of the other endpoints such as flashing code, are not allowed for customer tokens. ---
**Author:** ![system](https://us1.discourse-cdn.com/flex026/uploads/particle/original/3X/6/4/64635adccc35238caa19e9b553ec3e98b163d026.png) [@system](https://community.particle.io/u/system)\ **Post date:** [February 3, 2023, 8:10pm UTC](https://community.particle.io/t/api-and-customer-token/63782/3 "2023-02-03T20:10:16Z")
This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.