> ## Documentation Index
> Fetch the complete documentation index at: https://docs.agentpost.email/llms.txt
> Use this file to discover all available pages before exploring further.

# API Tokens

> Create and revoke API tokens to authenticate programmatic and MCP API access.

API tokens let you authenticate requests to the AgentPost MCP API. Each token acts as a credential for a specific integration or agent — create one per use case so you can revoke access independently.

## Create a token

<Steps>
  <Step title="Open API Tokens settings">
    Navigate to **Settings → API Tokens**.
  </Step>

  <Step title="Name your token">
    Enter a descriptive name for the token (for example, `my-agent` or `local-dev`).
  </Step>

  <Step title="Generate the token">
    Click **Create Token**. The plaintext token value is displayed once immediately after creation.
  </Step>

  <Step title="Copy the token">
    Copy the token and store it somewhere secure (for example, in your environment variables or a secrets manager).
  </Step>
</Steps>

<Warning>
  The token value is shown **only once**. It cannot be retrieved after you close or navigate away from this page. If you lose it, you must revoke the token and create a new one.
</Warning>

## Use a token

Send your token as a Bearer token in the `Authorization` header of every MCP API request:

```http theme={null}
Authorization: Bearer <your-token>
```

<Info>
  Tokens are rate-limited to **60 requests per minute** per token. Requests that exceed this limit receive a `429 Too Many Requests` response.
</Info>

## Revoke a token

In **Settings → API Tokens**, find the token you want to remove and click **Revoke**. The token is invalidated immediately — any in-flight requests using it will fail.

## Token list

The token list shows the following information for each token:

| Column        | Description                                                |
| ------------- | ---------------------------------------------------------- |
| **Name**      | The label you gave the token when you created it           |
| **Created**   | The date the token was generated                           |
| **Last used** | The date the token was last used to authenticate a request |