Howard Miller

This is a new thing. It used to be displayed on the token page and you could just copy it into your application.

I can see where this is going... as tokens are the equivalent of a username and password then that is insecure. It is. But you still need the token to copy it into your client. So there's a gap here somewhere.

While I am reluctant to recommend manipulating the database directly... yes, that's "safe" and the only way I know to do it.

It keeps an "archive" of the completion events it deletes.

The idea (and support) of periodic recompletion is pretty clunky in Moodle (hence Workplace and Iomad) but local_recompletion does take the edge off, if you need to do that.

We can't help you with Iomad, here. While it is based on Moodle , there are significant differences.

You need to approach the Iomad developers.