Create an API token

Make a personal token for a script or CI job, choose what it can do and when it expires, and keep it safe.

1 min readUpdated 1 October 2026

Create the token

1. 1

   Step 1: Open API tokens

   From your avatar menu, choose My account, then API tokens. Tokens belong to the workspace you’re in.

2. 2

   Step 2: Name it

   Choose Create a token and give it a name you’ll recognise later, such as CI · evidence upload.

3. 3

   Step 3: Choose what it can do

   Read only tokens can only read (GET requests). Read and write tokens can also make changes, within your role. Viewers can make read-only tokens.

4. 4

   Step 4: Choose when it expires

   In 7 days, 30 days, 90 days or a year. Tokens always expire; make a new one when it does.

5. 5

   Step 5: Copy it

   Select Create token and copy it from Copy your token. It looks like 42|bynh_pat_…, and the whole string, including the number and the bar, is the token. We only show it once.

What tokens can’t do

• Reach another workspace. Each token works only in the workspace it was made in.
• Change settings, members, roles, single sign-on or billing, or delete anything owners and admins alone can delete. Those need you, signed in to the app.
• Create or revoke tokens.

You can have up to 20 tokens per workspace. Next: Make your first API call.