Mountly

Documentation

Guides and public API reference

Back homePublic API
Access tokens1 min read

Documentation

Create an access token

This guide explains how to create an access token from the Mountly dashboard. Access tokens are required for integrations, internal tools, or backend workflows that need API access to your forms or entries.

Open the access-token creation wizard

  1. Go to Workspace > Tokens.
  2. Click Create token.
Create an access token: Open the access-token creation wizard

Name the token

Provide the basics for your new access-token:

  • Token name: (Required) Choose a name that clearly identifies the integration it will be used for.
  • Description: (Optional) Can be added for additional context.
Create an access token: Name the token

Choose permissions

Select only the permissions that the integration absolutely needs to function.

Create an access token: Choose permissions

Configure scope and expiration

Configure the following scope settings for the access-token:

  • Token type: (Required) Select Service token for workspace-wide automations, or Scoped form token to limit access to selected forms.
  • Expiration: (Optional) Choose an expiration preset or a custom date for the token. Shorter token lifetimes are more secure.
  • Scoped forms: (Optional) If you selected Scoped form token, choose the specific forms this token can access.
Create an access token: Configure scope and expiration

Review and create

Carefully check the token's name, permissions, expiration, and scope. If everything is correct, click Create token.

Create an access token: Review and create

Copy and save the secret

After creation, the token's secret will be displayed. Copy it immediately and store it in a secure location, such as a password manager, secret vault, or environment configuration.

Create an access token: Copy and save the secret
  • Get started: See practical first steps for using your access token with the public API.
  • Revoke an access token: Disable a token if it should stop working but still remain visible for auditing.