Generating API access tokens and using the Tenderly API are available on the paid plan. To enable them for your account, contact our sales team to schedule a call and discuss upgrading your plan.
Token scopes
A token’s scope is chosen at creation and cannot be changed afterwards. To change what a token can reach, create a new token and revoke the old one.Global tokens
A global token has the All projects scope: full access to every project in the organization except restricted projects. This includes projects created after the token, including projects the token itself creates through the API. There is no way to grant a global token access to a restricted project.Project tokens
A project token has the One project scope: access to exactly one project, whether that project is open to the organization or restricted. A project token is the only way to access a restricted project through the API. Creating a token for a restricted project requires the Manage access tokens permission and membership in that project. The project picker only lists projects you can see.Create an organization access token
- In the left sidebar, navigate to the organization and select Access Tokens.
- Click Create Access Token.
- Enter a name.
- Under Scope, select All projects for a global token or One project and pick the project for a project token.
- Optionally set an expiration date.
- Click Create Token.
Create a project token from project settings
Every project’s Settings page has a Project Access Tokens section listing the tokens scoped to that project, next to a Copy API URL button. Click Create to mint a token there; the scope is fixed to that project, so you only choose a name and an optional expiration. On a restricted project, the section notes that global tokens can’t access the project and links to the organization’s token inventory.Set a token expiration date
When creating a token, set it to expire in 30, 60, or 90 days or 1 year, or leave it with No expiration (the default). A token without expiration stays valid until you revoke it. The expiration date cannot be changed after creation. To extend access, create a new token, deploy it wherever the old one is used, and let the old token expire or revoke it. Both tokens work until the old one expires, so the replacement causes no downtime. Before a token expires, Tenderly sends email reminders, and a warning card appears in the dashboard sidebar while tokens are within 7 days of expiring. In the token list, an expired token is flagged in the Expires column. Tokens created before expiration support was introduced have no expiration date and never acquire one.Manage access tokens
The organization’s Access Tokens page lists every token with its Name, Scope (All projects or the project name), Created, Last used, and Expires columns. Search the list with the filter box and sort by the Created column; newest tokens come first by default.
Tokens created within an organization are accessible and manageable by members with the Manage access tokens permission.
Revoke an access token
Open the token’s row menu and select Revoke, then confirm. Revoking disables all endpoints and third-party services that use the token, effective immediately. Revoked tokens stay listed in the inventory with a Revoked state, so the record of the credential is preserved. Deleting a project revokes every project token scoped to it. Global tokens are unaffected by project deletion; the delete confirmation states how many project tokens will be revoked.Personal account access tokens
Personal tokens authenticate the individual account they’re tied to. Personal access tokens have no access to restricted projects; use a project token instead. To create a token for your personal account:- Click on your profile photo.
- Navigate to Account Settings.
- Go to the Access Tokens tab.
- Click Generate Access Token to create a new token.
