API tokens let other apps access your Denada team — most notably the Figma plugin, which uses a team API token to send designs from Figma into Denada.
Connecting an external AI agent like Claude Code? That uses your personal API token from your account menu, not a team token. See Connecting AI agents.
Team API tokens live in Settings under the API tokens section, and require manager or owner access.
Creating a token
- Go to Settings in the Denada app.
- Scroll to the API tokens section and click Create token.
- Enter a name for the token — it’s only used to distinguish between different tokens, so name it after the app that will use it (e.g. “Figma”).
The new token is copied to your clipboard automatically, ready to paste into the app that needs it. Tokens appear in the list with their name, and you can click any token to Copy token or Rename it later.
Treat API tokens like passwords. Never share them publicly or commit them to source control. If a token is compromised, delete it immediately and create a new one.
Using your token
Paste the token wherever the connecting app asks for it — for the Figma plugin, see the setup guide. For programmatic access, include the token in the Authorization header of your requests:
Revoking a token
Click the token in the API tokens list and choose Delete. Any applications using that token will immediately stop working — create a new token and update the app if you’re rotating credentials.
Need help?
If you have questions about API access, reach out to support@heydenada.com or ask in our Community Slack.