You need a token to do anything with the FogBugz XML API. Here’s how to get one:

Open a browser and load the following URL into it, replacing the text in [square brackets] with values appropriate to your install:

https://[yourfogbugz]/api.asp?cmd=logon&email=[youremail]&password=[yourpassword]
  • NOTE: If you’re on FogBugz On Demand, you must use HTTPS, not HTTP.

The API should give you an XML response with a token that looks something like this:

<response><token>tfhqpjantio6dav0er9lsjqpl5f2i8</token></response>

Copy the token value. This is how you use it to do a search for “foo”:

https://[yourfogbugz]/api.asp?token=[yourtoken]&cmd=search&q=foo

The token can be used indefinitely, and will only be invalidated by executing a logoff command with that token.

See also the full XML API documentation.