> ## Documentation Index
> Fetch the complete documentation index at: https://help.pixwel.com/llms.txt
> Use this file to discover all available pages before exploring further.

# API Tokens

> Personal access tokens that let scripts and integrations call the Pixwel API as you — create, manage, and revoke them.

**API tokens** (personal access tokens) let scripts and integrations call the Pixwel API as you. Manage them on the **API Tokens** tab in [Preferences](/features/preferences/overview).

<Warning>
  A token acts on your behalf with your **full account permissions**. Treat it like a password — the value is shown **only once**, when you create it.
</Warning>

<Frame caption="The API Tokens tab: create a token, then manage active tokens.">
  <img src="https://mintcdn.com/pixwel/LCc2un8fWfvdWtLT/img/preferences-api-tokens.png?fit=max&auto=format&n=LCc2un8fWfvdWtLT&q=85&s=6789c10d61b16179b82a8781dab15a12" alt="The Preferences API Tokens tab with a create form and a table of active tokens" width="1108" height="1070" data-path="img/preferences-api-tokens.png" />
</Frame>

## Creating a token

1. Enter a **Name** that describes where it's used (for example `ci-deploy`).
2. Choose an **Expires in** period — **30**, **60**, **90**, **180**, or **365 days**.
3. Click **Create token**.

The full token is then shown once, along with a ready-to-use `Authorization: Bearer …` header. Copy it immediately and store it somewhere safe — you won't be able to see it again.

## Managing active tokens

The **Active tokens** table lists your existing tokens:

| Column        | What it shows                                                                   |
| ------------- | ------------------------------------------------------------------------------- |
| **Name**      | The name you gave the token.                                                    |
| **Token**     | A non-secret prefix (for example `pat_9756bb3b…`) so you can tell tokens apart. |
| **Last used** | When the token last made a request (or `—` if never).                           |
| **Expires**   | When the token stops working.                                                   |

**Revoke** disables a token immediately. Revoke any token that's no longer needed or may have been exposed.