> For the complete documentation index, see [llms.txt](https://docs.couchdrop.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.couchdrop.io/administration/api-tokens.md).

# API Tokens

## Overview

API tokens allow applications and services to authenticate with the Couchdrop API without using a Couchdrop account password.

You can create new tokens and review existing tokens from the **API Tokens** page.

## How to create a new API token in Couchdrop

{% hint style="warning" %}

### Before you start

To create an API token, you will need access to the API Tokens page in Couchdrop.
{% endhint %}

{% stepper %}
{% step %}

### Create a new token

From API Tokens, click New token.

In the Create new token modal, use Select a user for this token to choose the Couchdrop user the token will be associated with.
{% endstep %}

{% step %}

### Copy and store the API token

After the token is created, Couchdrop displays New token created with the associated User and generated API token.

Copy the API token and store it in a safe place.

{% hint style="danger" %}
Treat API tokens as sensitive credentials. Store them securely and avoid exposing them in source code, logs, or other locations where unauthorized users could access them.
{% endhint %}
{% endstep %}
{% endstepper %}

## Managing API tokens

Existing API tokens are displayed in a table on the **API Tokens** page.

| Column        | Description                                           |
| ------------- | ----------------------------------------------------- |
| **Token Key** | Displays a partially masked version of the API token. |
| **User**      | Shows the Couchdrop user associated with the token.   |
| **Created**   | Shows when the token was created.                     |

## Delete an API token

To delete an existing API token:

1. Find the token in the API Tokens table.
2. Click the three-dot menu at the end of the token row.
3. Select the delete option.
4. Confirm the deletion in the confirmation modal.

{% hint style="warning" %}
Deleting an API token prevents it from being used for future authentication. Make sure the token is no longer required by any application or integration before deleting it.
{% endhint %}