API access without a need of token?

You could enable user/password authentication for a specific security zone just containing the calling IP.

Refer to allowUserPassword in:

Configuring Campaign server

Thanks Ramon,

Here on the page you sent, I found:

If I use a static IP with the following settings, we ll eliminate to get token every time.

<securityZone allowDebug="false" allowHTTP="false" label="Public Network" name="public">

<subNetwork label="All addresses" mask="*" name="all"/>

<securityZone allowDebug="true" allowHTTP="false" label="Private Network (VPN)"

  name="vpn" showErrors="true">

  <securityZone allowDebug="true" allowEmptyPassword="true" allowHTTP="true"

  allowUserPassword="false" label="Private Network (LAN)" name="lan"

  sessionTokenOnly="true" showErrors="true">

  <subNetwork label="Lan 1" mask="192.168.0.0/16" name="lan1"/>

  <subNetwork label="Lan 2" mask="172.16.0.0/12" name="lan2"/>

  <subNetwork label="Lan 3" mask="10.0.0.0/8" name="lan3"/>

  <subNetwork label="Localhost" mask="127.0.0.1/16" name="locahost"/>

  <subNetwork label="Lan (IPv6)" mask="fc00::/7" name="lan6"/>

  <subNetwork label="Localhost (IPv6)" mask="::1/128" name="localhost6"/>

  </securityZone>

</securityZone>

</securityZone>