Skip to content
0333 090 4540
Snappyhost

Create and revoke an API token

Give an authorised integration a credential and plan when to revoke it.

Where Tools → Security → Manage API Tokens

Before you start

  • Confirm the integration is trusted and genuinely needs account access.
  • Have private secret storage ready. Never put a token into website source, a screenshot or a public URL.

Steps

  1. 1

    Open Manage API Tokens. If the list appears first, click Create; an empty account may open the creation form directly.

  2. 2

    Enter a descriptive API Token Name identifying the integration.

  3. 3

    Click Create only when ready to grant access. Copy the token into private secret storage before leaving the result page, then acknowledge that you saved it.

  4. 4

    Use the token only in the intended integration. The value cannot be recovered from the list later.

  5. 5

    To end access, find the correct token and use Manage → Revoke the Token, or the list’s revoke action. Review the name before confirming.

  6. 6

    Choose Specify an expiration date where possible and set an appropriate end date. The displayed default is no expiry; do not accept it without considering the risk.

    Choose a clear name and consider an expiry before Create.

Check it worked

  • Test the authorised integration without printing the token in logs.
  • After revocation, confirm the integration no longer authenticates. Replace a lost token by revoking it and creating a new one.