[GH-ISSUE #2322] [Feature Request] Limit use of installer token #1436

New issue

Open

opened 2026-03-02 02:23:09 +03:00 by kerem · 1 comment

kerem commented

2026-03-02 02:23:09 +03:00

Owner

Originally created by @P6g9YHK6 on GitHub (Oct 20, 2025).
Original GitHub issue: https://github.com/amidaware/tacticalrmm/issues/2322

Is your feature request related to a problem? Please describe.
We can currently set how long a token is valid, but there is no way to limit how many times a token can be used. This creates a security gap: if someone discovers a token, they can reuse as many time it wishes until it expires, which may lead to unexpected agents appearing on the dashboard.

Describe the solution you'd like
Add a “max uses” option for tokens (in addition to expiry). When set, the token becomes invalid after it has been used the configured number of times. Expose this option in the UI when creating tokens and enforce it server-side for all token validation logic.

Originally created by @P6g9YHK6 on GitHub (Oct 20, 2025). Original GitHub issue: https://github.com/amidaware/tacticalrmm/issues/2322 **Is your feature request related to a problem? Please describe.** We can currently set how long a token is valid, but there is no way to limit how many times a token can be used. This creates a security gap: if someone discovers a token, they can reuse as many time it wishes until it expires, [which may lead to unexpected agents appearing on the dashboard.](https://docs.tacticalrmm.com/faq/#help-ive-been-hacked-and-there-are-weird-agents-appearing-in-my-tactical-rmm) **Describe the solution you'd like** Add a “max uses” option for tokens (in addition to expiry). When set, the token becomes invalid after it has been used the configured number of times. Expose this option in the UI when creating tokens and enforce it server-side for all token validation logic. <img width="575" height="743" alt="Image" src="https://github.com/user-attachments/assets/6cd238fe-8363-4139-b4ae-64da9e7d8a24" />

kerem commented

2026-03-02 02:23:10 +03:00

Author

Owner

@Kf637 commented on GitHub (Nov 23, 2025):

Would be useful.

@Kf637 commented on GitHub (Nov 23, 2025): Would be useful.