---
title: "Creating an API Token"
slug: "creating-an-api-key"
description: "Learn how to create and manage secure API tokens for Stackup's developer platform in just 3 simple steps. Enable programmatic access to your crypto operations with proper security controls."
updated: 2025-05-27T09:51:19Z
published: 2025-05-27T09:51:19Z
canonical: "docs.stackup.fi/creating-an-api-key"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.stackup.fi/llms.txt
> Use this file to discover all available pages before exploring further.

# Creating an API Token

## Overview

API tokens let your systems interact with Stackup programmatically. This guide shows you how to create and manage them.

## Base URL

`https://api.app.stackup.fi`

## Bearer Token

All API requests to the Stackup API require the "Authorization" HTTP header with a Bearer token. API tokens can be managed via the organization's settings page.

`Authorization: Bearer your_api_key`

## Creating a Token in 3 Steps

![GIF showing how to access API settings and create an API token in Stackup's crypto operations platform.](https://cdn.document360.io/dbfbaa96-255a-451a-bce5-b89923e769bb/Images/Documentation/api.gif)

### 1. Access API Settings

- Log in to [app.stackup.fi](https://app.stackup.fi)
- Navigate to your desired **Organization** in the top of the left sidebar.
- Go to **Settings** → **API Keys**

### 2. Generate Token

- Click **Create New Token**
- Name it (e.g., "Treasury Automation")
- Select permission level:
  - **Read-only**: View only
  - **Standard**: Create but not execute transactions
  - **Admin**: Full access
- Click **Generate Token**

### 3. Save Securely

- Copy the token immediately (shown only once)
- Store in your password manager or secrets system
- Click **I've copied my token**

## Managing Tokens

### View & Revoke

- See all API tokens in **Settings** → **API Keys**
- Click the **trash can** to immediately disable a token

### Security Tips

- Use separate tokens for different systems
- Grant minimum necessary permissions
- Rotate tokens every 90 days
- Never share via email or messaging

## Using Your Token

Add to all API requests:

```plaintext
Authorization: Bearer your_api_token
```

## Next Steps

→ Set up [Batch Transactions API](/v1/docs/batched-transactions-api)