I was trying to write some scripts to automate some Fogbugz processes. However, we still use "FogBugz For Your Server".
In order to call the api.asp, you need to pass in a token. According to http://help.fogcreek.com/8447/how-to-get-a-fogbugz-xml-api-token#FogBugz_For_Your_Server, you need to pass in your email and password as command line parameters. Talk about lame.
Since I do not have FogBugz On Demand or FogBugz On Site, I do not have the Create API Token button.
Fortunately, I found via a network trace that the cookie value for fbToken can be used. No more query string plaintext passwords.