Create and manage API tokens
Create and rotate tokens in User settings, inspect team credentials in Space Admin, and check why a manual token is paused.
Create a token
- Open User settings → API tokens. Select the confirmed, open Pro space where you are an owner or staff member.
- Choose Create token, name your integration and select only the permissions it needs. Under Expiry & IP restrictions, you can set an expiry in days and allow specific outgoing IP addresses.
- Create the token and copy its secret into your server’s secret store. The full value appears only at creation or rotation. Make a first API request with a single credential header.
The limit of ten active, unexpired credentials applies across your account and includes assistant credentials. Slack and MCP account connections have separate consent flows.
Review team access
Open Space Admin → Settings & tools → API access to see which integrations use the space, who issued each credential and its status. This view is read-only. Manage my tokens opens your account with that space selected.
Rotate, revoke or restore access
In your account, rotate your own active manual token to replace its secret. The old value stops working immediately. Revoke an unused token to end access. Select Show revoked tokens to include revoked credentials. Use Connected apps to manage assistant connections.
A paused token can indicate lost management rights, an unavailable space or lapsed Pro coverage. Restore eligibility and check the status before using it again. Expiry and revocation still apply. A denied rotation preserves the original credential. Authentication and errors.