> ## Documentation Index
> Fetch the complete documentation index at: https://help.heydenada.com/llms.txt
> Use this file to discover all available pages before exploring further.

# API tokens

> Create team API tokens so other apps can access Denada

API tokens let other apps access your Denada team — most notably the [Figma plugin](/integrations/figma), which uses a team API token to send designs from Figma into Denada.

<Note>
  Connecting an external AI agent like Claude Code? That uses your **personal** API token from your account menu, not a team token. See [Connecting AI agents](/agents/connecting).
</Note>

Team API tokens live in **Settings** under the **API tokens** section, and require manager or owner access.

## Creating a token

1. Go to **Settings** in the Denada app.
2. Scroll to the **API tokens** section and click **Create token**.
3. Enter a name for the token — it's only used to distinguish between different tokens, so name it after the app that will use it (e.g. "Figma").

The new token is copied to your clipboard automatically, ready to paste into the app that needs it. Tokens appear in the list with their name, and you can click any token to **Copy token** or **Rename** it later.

<img className="screenshot" src="https://mintcdn.com/denada/xjX7XM-d7P3k40as/images/generated/api-tokens.png?fit=max&auto=format&n=xjX7XM-d7P3k40as&q=85&s=5c54199647fd90123f71e28682a4eaf0" alt="API tokens panel with an existing Figma token and the Create token button" width="560" data-path="images/generated/api-tokens.png" />

<Warning>
  Treat API tokens like passwords. Never share them publicly or commit them to source control. If a token is compromised, delete it immediately and create a new one.
</Warning>

## Using your token

Paste the token wherever the connecting app asks for it — for the Figma plugin, see the [setup guide](/integrations/figma). For programmatic access, include the token in the `Authorization` header of your requests:

```
Authorization: Bearer your-token-here
```

## Revoking a token

Click the token in the **API tokens** list and choose **Delete**. Any applications using that token will immediately stop working — create a new token and update the app if you're rotating credentials.

## Need help?

If you have questions about API access, reach out to [support@heydenada.com](mailto:support@heydenada.com) or ask in our [Community Slack](https://join.slack.com/t/denadacommunity/shared_invite/zt-33ermqnvl-kU9677V0eloK5Jf2SSNO5g).