> For the complete documentation index, see [llms.txt](https://docs.discloud.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.discloud.com/en/faq/general-questions/how-can-i-get-my-discloud-api-token.md).

# How can I get my Discloud API token?

## 🔑 What is the Discloud API Token?

Your **Discloud API Token** is a **personal, secret credential** that authenticates you to all Discloud developer surfaces:

* [**REST API requests**](/en/api-and-integrations/api-overview.md)
* [**Official CLI**](/en/how-to-host-using/cli.md)
* [**VS Code Extension**](/en/how-to-host-using/visual-studio-code.md)
* **SDK / Libraries** (e.g. [npm](/en/sdks-and-libraries/npm-library.md), [Python](/en/sdks-and-libraries/python-library.md))

It uniquely identifies your account, so **anyone with this token can act as you**. Treat it like a password.

***

## 📍 Where to Get It

Follow these steps to view (or copy) your token on the Dashboard:

{% stepper %}
{% step %}
Open the Dashboard: <https://discloud.com/dashboard>
{% endstep %}

{% step %}
In the left sidebar, expand **Tools** and click **API keys**.

<figure><img src="/files/QqDT0BYTYEbHHm3P5zLf" alt="Dashboard API keys page"><figcaption></figcaption></figure>
{% endstep %}

{% step %}
Use the **Copy** button to place the token on your clipboard.
{% endstep %}
{% endstepper %}

> If the token is hidden, click **Show** to reveal it. Use **Reset** only if you suspect it has been compromised.

***

## 🔒 Security Best Practices

| Practice                                    | Why                               |
| ------------------------------------------- | --------------------------------- |
| Keep it private (never share or screenshot) | Prevent account takeover          |
| Do NOT commit to Git                        | Public repos are scanned by bots  |
| Use environment variables / secret managers | Centralized rotation & safer logs |
| Rotate (Reset Token) if exposed             | Immediately invalidates old token |

{% hint style="danger" %}
If you accidentally publish or paste your token somewhere public, **reset it immediately** under **Tools > API keys** in the Dashboard and redeploy any services using the old one.
{% endhint %}