---
title: "API tokens"
canonical: "https://support.appfire.com/space/SPM/1918666949/API%20tokens"
format: markdown
---
> Macro (aura-html)

# API tokens (old navigation)

<details>
<summary>Click to expand the guide</summary>

> 📝 - For detailed information about available endpoints, check [the API Documentation](https://developer.bigpicture.one/reference/whatisbigpicture).
> 📝 - If you are looking for information about API specifically for the OKR module, visit the [OKR API](https://appfire.atlassian.net/wiki/spaces/SPM/pages/3064169104) page.

Tokens are used to authenticate BigPicture in other applications. 

> ℹ️ Your tokens need to be treated as securely as any other password.

![Screenshot of the My settings page in BigPicture.](media://2fef74c4-5071-46d5-8708-c87ad8a73a87)

## Add a new token

1. Open the **BigPicture **>** My settings **>** API tokens** page.
2. Click the **Add new token** button.
3. Enter a token name and click **Create**.
4. The token is masked. You can view the token or simply copy it to a clipboard.

The interactive tutorial presents adding a new token.

 

## Revoke a token

> ℹ️ This action cannot be reversed.

1. Open the **BigPicture **>** My settings **>** API tokens** page.
2. Click the **Revoke **button next to a selected API token.
3. Click **Revoke** to confirm.

The video presents revoking a token.

> Macro (iframe)

## Revoke all tokens

> ℹ️ This action cannot be reversed.

1. Open the **BigPicture **>** My settings **>** API tokens** page.
2. To revoke all API tokens, click **Revoke all**.
3. Click **Revoke** to confirm.

The interactive tutorial presents revoking all tokens.
</details>

# API tokens (new navigation)

<details>
<summary>Click to expand the guide</summary>

API tokens are used to authenticate BigPicture in other applications. 

> 📝 - For detailed information about all available endpoints, check [the API Documentation](https://developer.bigpicture.one/reference/whatisbigpicture).
> 📝 - If you are looking for information about API specifically for the OKR module, visit the [OKR API](https://appfire.atlassian.net/wiki/spaces/SPM/pages/3064169104) page.

> ℹ️ Your tokens need to be treated as securely as any other password.

## Create an API token

1. Open **App Settings **>** My settings **>** API tokens** page.
2. *API tokens* page displays. Click the **+Add new token** button.
3. Add a name for the token.
4. Click **Create** to generate a token.
5. The token is masked but you can reveal it. Use the **Copy to clipboard** button to copy the generated API token. Store it securely, as you will not be able to retrieve it later.

![Your new API token modal.](media://695aefc9-0452-416e-a901-432504ffdbcf)

6. You can close the modal.

## Manage API tokens

You can revoke individual or all tokens listed on the *API tokens* page.

> ⚠️ The token revocation action cannot be reversed.

### Revoke a token

1. On the *API tokens* page, click the **Revoke **button next to a selected API token.
2. Click **Revoke** to confirm.

### Revoke all tokens

1. Open the **BigPicture **>** My settings **>** API tokens** page.
2. To revoke all API tokens, click **Revoke all**.
3. Click **Revoke** to confirm.

### Hide invalid tokens

Enable the **Hide invalid tokens** toggle switch if you want revoked tokens to be hidden from view.

![Screenshot of the Hide invalid tokens toggle switch on the API tokens page.](media://84d04bc9-a6e3-42d5-81e8-04990dafc6e7)
</details>