I use this route for get token for use in my apap.
My app connects with one InoviceNinja installation, and get clients, invoices, and process in my app, for synchro with my cloud accounting program, sage.
For this, I need a token X-API-TOKEN and this is on this route after login.
I see my mistake. X-API-TOKEN is same that I use in login.
The other endpoints of API only need this token.
Over license, is a personal app created in Laravel to connect another provider, API (OVH), API of WHMCS (for hosting business), and other businesses (mine) with an InvoiceNinja as invoice system, and get data y process for upload and synchro to my owned account is Sage Cloud.