API Tokens
AgentPost uses Bearer token authentication. The same tokens work for both the REST API and the MCP API.Generate a token
- Log in to the AgentPost dashboard
- Go to Settings > API Tokens
- Click Create Token and give it a name
- Copy the token immediately — it is shown only once
Use the token
Include it in theAuthorization header of every request:
Token security
- Tokens grant full access to your account (mailboxes, messages, domains, sending)
- Treat tokens like passwords — do not commit them to source control
- Revoke compromised tokens immediately at Settings > API Tokens
- Tokens do not expire, but you can revoke them at any time
Unauthenticated Requests
Requests without a valid token receive a401 response: