All docs

Where to find and create API tokens

Create a scoped API token, copy it once, and revoke it - the quickest way into the API and connected AI tools.

Updated . 2 min read.

An API token lets a script, integration, or AI assistant act as you, limited to the permissions you choose. Tokens work for the REST API and for connected AI tools.

Find them

Any of these opens the same page:

  • Settings → API tokens on the Settings hub.
  • Settings → Developer, then API tokens in the Developer menu.
  • Press Cmd+K and search for "API tokens" (see Search and the setup guide).

The page lists each token with its Name, Permissions, Last used, and Expires. Use the search box to find one.

Create a token

  1. Choose Create token.

  2. Enter a Name that says what the token is for, such as "Zapier" or "Reporting script".

  3. Pick Permissions:

    • Read forms and responses
    • Create submissions
    • Edit and publish forms
    • Reply in Desk

    Open Fine-grained permissions for the full list of abilities.

  4. Choose when it Expires: in 90 days, in 1 year, or never.

  5. Create the token and copy it straight away. For your security it is not shown again.

Keep it in a password manager or secrets store. Give each tool its own token with the least permissions it needs, so you can revoke one without breaking the rest.

Change or revoke a token

  • Edit the permissions of an existing token from its row.
  • Revoke deletes a token. Anything using it stops working immediately until you paste in a new token.

Next