Prerequisites:
Completed Onboarding Process
Creating an API Token
API tokens are JWTs with an infinite duration used to access different APIs. They enable machine-to-machine communications through CLI, GitHub, GitLab, and other supported integration tools. Here's how to create and manage your tokens:
Creating a New Token
Navigate to "API Tokens" under the Organization settings
Click "Add a Token"
Review and approve the token creation
Once created, a token can have two status:
Active: Token is valid and can be used
Revoked: Token is invalid and cannot be used
With an active token, you can:
View the token details
Copy the token for use in your integrations
🔐 Security Note: Store your API token securely. It grants access to your Thunder Code resources.
Revoking a Token
If you need to invalidate a token:
Find the token you want to revoke
Click the "Revoke" button next to that token
Confirm the revocation when prompted
⚠️ Warning: Once revoked, a token cannot be restored. You'll need to create a new token if you need access again.
Best Practices
Create separate tokens for different integrations to maintain better security control
Regularly review your active tokens and revoke any that are no longer needed
Keep a secure record of which token is used for which integration
For questions about API token management, contact our support team at [email protected]