Skip to content
cavyroHelp

API tokens

API tokens let external tools talk to your workspace: your own scripts, integrations, or an MCP client like Claude or Cursor.

Creating a token

Section titled “Creating a token”
  1. In Settings, open API tokens and create one with a name you’ll recognize later.
  2. Pick an expiry: 7, 30, or 90 days, or never for long-lived integrations that can’t rotate tokens.
  3. Copy the token when it’s shown. It acts with your permissions in this workspace, nothing more.

Revoking

Section titled “Revoking”

Revoke a token any time and it stops working immediately. Expired and revoked tokens stay in the list so you can see what existed.

Good practice

Section titled “Good practice”
  • One token per integration, so revoking one thing doesn’t break another.
  • Prefer an expiry date; use “never” only where rotation is genuinely impossible.