# API tokens (/reference/api-tokens)

<Callout title="This page is being written">
  For now, [Connect Claude, Cursor or ChatGPT](/guides/connect-ai-assistants) covers creating a read-only token.
</Callout>

## Outline [#outline]

- **What a token is:** a bearer token, scoped to one organization, shown once at creation.
- **Create a token:** Settings → API Tokens → **Create token**: name, expiry (30, 90 or 365 days, or never) and access (read-only or read and write). Admins only.
- **Copy it once:** the one-time reveal, and what to do if you lose it.
- **Token status:** Active, Expired, Revoked and Inactive, and why a token goes inactive.
- **Limits:** three active tokens per organization; rotating without downtime.
- **Revoke a token.**
- **Use a token:** the `Authorization: Bearer` header.