> For the complete documentation index, see [llms.txt](https://docs.ochats.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.ochats.io/module-tutorial/settings/api-tokens.md).

# API Tokens

The API Tokens module allows you to generate secure authentication keys to connect oChats.io with external applications, custom CRMs, or developer tools. Managing your tokens properly ensures your data remains secure while enabling powerful third-party integrations.

### 🔑 How to Generate a New API Token

Follow these steps to create a secure API token for your workspace:

#### Step 1: Navigate to API Tokens Settings

1. Open your oChats.io dashboard.
2. Look at the left-hand sidebar menu, scroll down to the Settings dropdown section, and click on API Tokens.

<figure><img src="/files/7eDfOMAVncieYze6ELOE" alt=""><figcaption></figcaption></figure>

#### Step 2: Initiate Token Creation

1. On the API Tokens management page, locate the action button at the top right (typically labeled Generate API Token or Create Token).
2. Click the button to launch the configuration pop-up modal.

#### Step 3: Name Your Token

1. In the pop-up window, enter a recognizable name in the Token Name field (e.g., *HubSpot CRM Integration* or *Production Server Link*).
2. Assigning a clear name helps you easily track which external application is using which token later on.

<figure><img src="/files/bTNIDTbRhOegdSN7Moal" alt=""><figcaption></figcaption></figure>

#### Step 4: Generate and Copy the Key

1. Click Generate.
2. Your unique API token string will be displayed on the screen.

> ⚠️ Important Security Warning: Copy your API token immediately and store it in a secure location (such as a password manager). For security reasons, this token will only be shown to you once. Once you close this window, you will not be able to retrieve or view the token string again.

<figure><img src="/files/zxnr819a5BgYNTXmO2EA" alt=""><figcaption></figcaption></figure>

### 🚫 Revoking or Deleting a Token

If an API token is no longer in use, or if you suspect it has been compromised, you should revoke it immediately:

1. Locate the specific token from the list on the API Tokens dashboard.
2. Click the Delete or Revoke button next to it.
3. Confirm the action. Any external systems utilizing that specific token will instantly lose access to your oChats.io workspace.