---
title: "Generating a token"
slug: "api-token"
updated: 2025-06-10T08:53:28Z
published: 2025-06-12T07:22:11Z
canonical: "apidocs.document360.com/api-token"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://apidocs.document360.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Generating a token

Document360 uses token-based authentication to secure its API. All API requests must include a valid token in the request header. This token grants access based on the permissions configured during its creation.

> If you already have an API token, you can skip this article.

---

## Generating a new token

To create a new API token in Document360,

1. Log in to the knowledge base portal.
2. Navigate to **Settings** **()** > **Knowledge base portal** > **API tokens** **.**
3. The **API tokens** overview page appears with a list of previously generated tokens (if any).
4. Click the **Create API token** button.
5. Enter the token **Name,** select the **Allowed methods** (GET, POST, PUT, DELETE), and click **Create**.

The generated token appears in the list.
6. Click the **Copy ()** icon to copy the token to the clipboard.

![](https://cdn.document360.io/2b5c503e-f283-4987-b5a8-2b71b454ecec/Images/Documentation/1_Screenshot-API_token_create_api_token.jpg)

You have now successfully generated an API token, which you can use in other applications to perform actions in Document360.

> [!TIP]
> TIP
> 
> Treat your API tokens like passwords. Never expose them in public repositories, client-side code, or unsecured locations.

All requests to the Document360 API must be made over HTTPS. Requests sent over HTTP or without a valid token will fail.

Once you've generated the token, include it in the header of each API request to authenticate successfully. To learn how, see [Making your first request](/v2-api/apidocs/making-your-first-request).