Manage API tokens: create, view usage, and revoke

API tokens are how CompliAPI authenticates your requests. Each token belongs to your organization, so every team member's requests count against the same monthly quota. You manage all tokens from the Tokens page in the dashboard.

Create a token

1. Go to the Tokens page in the dashboard.
2. Click Create token and give it a name so you can identify it later.
3. Copy the token immediately — the plaintext value is shown only once at creation and cannot be retrieved again.
4. Store it somewhere secure, such as an environment variable or a secrets manager. Never commit it to source control.

Once created, use the token by passing it as a bearer header on every request:

Authorization: Bearer capi_...

Revoke a token

1. Find the token on the Tokens page.
2. Click Revoke. The token stops working immediately.

Revoke any token you no longer need or that you suspect has been exposed. There is no limit on how many tokens your organization can have, so you can create a replacement before revoking an old one to avoid downtime.

Manage authorized OAuth apps

If you connect an MCP client (such as Claude or Claude Code) using OAuth, those connections also appear on the Tokens page under Connected apps. Each entry shows which app was authorized. To disconnect an app, click Disconnect next to it — this immediately invalidates that app's access. You can reconnect at any time by going through the OAuth flow again.