> For the complete documentation index, see [llms.txt](https://docs.flosum.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.flosum.com/global-settings/security/api-tokens/managing-api-tokens.md).

# Managing API Tokens

{% hint style="success" %}

#### Required User Credentials

\[**Flosum User**] - Any Role
{% endhint %}

## ![](https://579543750-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FsEk2hU5IMh3HEY5dJZjR%2Fuploads%2FSxcnKlaJKPzDqONWoDNv%2FSummary2-Small-Icon.svg?alt=media\&token=5e3253d0-a069-4ba5-9c06-83c70bd0b21d) Overview

This article explains how to view, update, and delete API Tokens.

## Managing API Tokens

{% stepper %}
{% step %}

### View API Tokens

1. Click **API Tokens** from the left sidebar menu.
2. All API Tokens are listed in the table and can be searched by Token Name.
3. The **Expired At** column lists the date the token will expire and no longer grant access to the Flosum API. If this column is blank, it means the token never expires.

   <div align="left"><figure><img src="https://579543750-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FsEk2hU5IMh3HEY5dJZjR%2Fuploads%2F3ixVZIYNTEy7CsmPrAap%2FManagingApiTokens-S01-01.png?alt=media&amp;token=30e973ab-ac46-4518-ba0a-d9c5a2904da9" alt="" width="563"><figcaption></figcaption></figure></div>

{% endstep %}

{% step %}

### Update API Token

Updating an API Token lets you change its expiration time and generate a new token.

{% hint style="danger" %}
Updating a token invalidates the previous one. Any services that use this token must be updated to the new value to continue working.
{% endhint %}

1. Click the **Update** icon on the right side of the API Token to update.

   <div align="left"><figure><img src="https://579543750-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FsEk2hU5IMh3HEY5dJZjR%2Fuploads%2FdPMs6GlJ9xqBO7OuSR9W%2FManagingApiTokens-S02-01.png?alt=media&amp;token=af426843-cc65-4cf6-82b2-d51a5b7d2449" alt="" width="563"><figcaption></figcaption></figure></div>
2. Click the **Expiration** dropdown menu.

   <div align="left"><figure><img src="https://579543750-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FsEk2hU5IMh3HEY5dJZjR%2Fuploads%2FmmDifG3Z2IughREgHcvV%2FManagingApiTokens-S02-02.png?alt=media&amp;token=94fd3341-391a-4256-bd14-5f5285298dba" alt="" width="375"><figcaption></figcaption></figure></div>
3. Select the number of days you want the API Token to be valid for.

   <div align="left"><figure><img src="https://579543750-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FsEk2hU5IMh3HEY5dJZjR%2Fuploads%2FjIr1uvwtwEYzWuqeogj3%2FManagingApiTokens-S02-03.png?alt=media&amp;token=36dbb450-c54c-4398-9ebe-d21bf3e9cb56" alt="" width="375"><figcaption></figcaption></figure></div>

{% hint style="info" %}

#### Updated Token Expiration

When you update an API Token, the expiration countdown restarts from the update date, not from the token’s original creation date. For example, if you create an API token on the 1st of the month with a 7-day expiration and update it on the 4th with another 7-day expiration, the token will expire on the 11th.
{% endhint %}

{% hint style="warning" %}

#### Token Expiration

Once an API Token expires, any services using the token will be unable to access Flosum's API. For services that require continuous access, such as an SSO Identity Provider, select **No expiration**.
{% endhint %}

4. Click **Update**.

   <div align="left"><figure><img src="https://579543750-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FsEk2hU5IMh3HEY5dJZjR%2Fuploads%2FMPo68Ur9cS5ol0hcVJPp%2FManagingApiTokens-S02-04.png?alt=media&amp;token=ed6b0630-2b64-4651-beba-ba59c03cb88e" alt="" width="375"><figcaption></figcaption></figure></div>
5. Once updated, the API Token will be displayed.
6. Click the **Copy** icon to copy the token and then save it securely. You won't be able to view it again.

   <div align="left"><figure><img src="https://579543750-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FsEk2hU5IMh3HEY5dJZjR%2Fuploads%2Fw2aYQtKUEcsndSeClaNe%2FManagingApiTokens-S02-05.png?alt=media&amp;token=b4c14ef9-b277-410b-9dfa-1545e8aff2f9" alt="" width="375"><figcaption></figcaption></figure></div>
7. Click **Close**.
   {% endstep %}

{% step %}

### Delete API Token

An API Token can be deleted at any time to revoke access to Flosum's API for that token.

{% hint style="danger" %}
Deleting an API token revokes access for all services using it. This action cannot be undone.
{% endhint %}

1. Click the **Trash Can** icon on the right side of the API Token to delete.

   <div align="left"><figure><img src="https://579543750-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FsEk2hU5IMh3HEY5dJZjR%2Fuploads%2FUnzqkjMQueAlul4uUlVh%2FManagingApiTokens-S03-01.png?alt=media&amp;token=ff60e884-b7e9-482e-a5e9-393601dd7a0d" alt="" width="563"><figcaption></figcaption></figure></div>
2. Click **Confirm** in the delete API Token confirmation dialog.

   <div align="left"><figure><img src="https://579543750-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FsEk2hU5IMh3HEY5dJZjR%2Fuploads%2FYaaSFdGAbclbK8AaROA4%2FManagingApiTokens-S03-02.png?alt=media&amp;token=d9f7bc61-2fb5-4a6a-99c4-ef4c26f89d73" alt="" width="375"><figcaption></figcaption></figure></div>
3. Once deleted, all services using the API Token will no longer have access to Flosum's API.
   {% endstep %}
   {% endstepper %}


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://docs.flosum.com/global-settings/security/api-tokens/managing-api-tokens.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
