---
title: "Creating, rotating and revoking API tokens"
description: "Creating, rotating and revoking API tokens"
---

Under Settings → API access (admin) you can create a new key with a label and a permission matrix. The full secret is shown exactly once, right after the key is created or rotated — copy it then, it can't be retrieved again. “Rotate” gives the key a new secret (the old one stops working immediately); “Revoke” permanently disables the key after a confirmation.