Access tokens in the dashboard

The Access section holds the tokens for API requests and the list of domains where the widget works. It has two tabs: API keys and Allowed domains. See allowed domains for the second tab.

Create a token

1. Open Access, then API keys, and click Add new access token.
2. In the new token panel, set the validity. Never expires is on by default. For a token that expires on a given day, clear the checkbox and set the expiration date.
3. Click Create token.

A token has no name and no permissions to set.

The token card

• Token ID is the token value. The copy icon next to it copies the value.
• Expires at shows "Never", the expiry date or "Expired".
• Edit changes the validity.
• Delete deletes the token. Confirm the deletion. Requests with a deleted token stop going through.

How to pass the token

A permanent API token from your account goes in the token field of the request body, including in a multipart/form-data form. A user token obtained at authorization goes in the token header. See authentication and the Python example.

Keep tokens secret

Store tokens as secrets. Never put one in browser code, a mobile app or a repository.

The same task in the API

List tokens, create token, update token and delete token.