WORKSPACE CONTROL / 6 MIN READ
Create and revoke an API token
Connect one workspace with the least access your integration needs.
Plan: Free4 clear steps
Follow the steps
01
Open Settings → Integrations
As a workspace owner or admin, find the API tokens panel for the active workspace.
02
Name and scope the token
Choose a descriptive name. Keep it read-only unless the integration must create or update supported records.
03
Store the secret securely
Copy the secret when it is shown once and keep it in a server-side secret store. Never place it in browser code or public documentation.
04
Test and rotate
Make a small read request to the supported API. Revoke the token when it is no longer needed or could be exposed.
BEFORE YOU MOVE ON
Check the result
A scoped request succeeds and the token listing shows the expected name and status.
Worth knowing
A token is bound to one workspace and remains subject to its creating user’s active membership. See Developer Tools for exact endpoints.