API tokens

For: Admins and technical users Where to find it: Click your avatar (bottom of the sidebar) → Settings → API Tokens

An API token is a long, random string that lets another piece of software sign in to Tourium on your behalf. You'd use one if you're connecting Tourium to an external system — a CRM, a reporting dashboard, a home-grown integration, or a tool like Zapier.

If you don't know what an API token is for, you probably don't need one. Skip this page.

Common tasks

Create a new token

  1. Open Settings → API Tokens.
  2. Click Create Token.
  3. Give it a short, descriptive name (for example, "Zapier integration" or "Monthly report exporter"). Names help future-you remember what each token is for.
  4. Click Generate.
  5. Copy the token value immediately. Tourium only shows the full token once — as soon as you close the dialog, the token is hidden and you'll never see it again.
  6. Paste the token into the system you're connecting to.

If you lose a token, you can't recover it — you have to create a new one.

See your existing tokens

The API Tokens page lists every token on your account with its name, when you created it, and when it was last used. The actual token value is not shown.

Revoke a token

  1. Find the token in the list.
  2. Click the delete icon next to it.
  3. Confirm.

The token stops working immediately. Any system still using it will get an authentication error. Revoking is permanent — generate a new token if you need to restore access.

Keep tokens safe

Treat an API token like a password:

  • Don't share it. Anyone with the token can act as you on Tourium.
  • Don't paste it into chat, email, or a screenshot.
  • Don't commit it to source control. If it ends up in a git repository, revoke it immediately and create a new one.
  • Give each integration its own token. That way you can revoke one without breaking the others.

Tips

  • The name you give a token is only visible to you. Use it to describe what the token is for, so you know which to revoke when you retire an integration.
  • Tokens don't expire automatically. Review the list every now and then and revoke anything you're no longer using.
  • The token is tied to your user account, not your organisation — if you leave the organisation or are removed, any integrations using your tokens will stop working.
Previous Uploading rates Next Appearance