The API token feature enables external services to access your data and perform actions on your behalf. For example, you can use your token to export comments anywhere via Zapier or with a custom workflow.
We are preparing to replace API tokens on January 15th, 2027 with access tokens, which control access to your account more securely. Going forward, new legacy API tokens cannot be created but will continue to work until January 15th, 2027.
If your API token is in use by any external services, be sure to replace it with a personal access token before January 15th to avoid disruptions.
What are access tokens?
Instead of a single API token, you can have multiple access tokens. Each access token can access either the Pastel API, MCP, or CLI. Access tokens have an expiration date ranging from 7 days to 1 year.
Access tokens are managed on the Integrations settings page. You can see which services currently have access to your account, when they last used it, and you can revoke access.
Personal access tokens are tokens created manually by you (as opposed to tokens created by services using an OAuth authorization flow).
How to migrate to access tokens
Go to the Integrations settings page, and click New personal token.
Name your token, e.g. Zapier export. Select API access. Then select an expiration date. Click Create token.
Copy the token and store it somewhere secure, such as a password manager. You won’t be able to view the token within Pastel again.
Wherever you are using an API token, replace it with your personal access token.
If you have any questions or run into any issues setting up your new access tokens, don't hesitate to reach out at support@usepastel.com.