Qovery offers a second kind of token. An API Token carries a
role and is the right choice for
CI/CD, Terraform and scripts. An
API Policy Token carries no
role but a policy evaluated on every request, and is meant for autonomous
agents that need a narrower footprint than any role can express.
Accessing API Tokens
1
Open Organization Settings
Click the Settings tab while you are on your organization overview.

2
Navigate to Token API Section
Open the Token API section within the organization settings

Create a New Token
1
Click Add new Button
Press the Add new button to create a new API token
2
Configure Token
Provide the following information: - Name: A descriptive name for the
token - Description: Purpose or usage details - Role: Select a role
managed via the Qovery RBAC system
3
Save Token
After creation, the token will be displayed once
Review Token Usage
Each token in the Token API list shows its role, its creation date, and Last used, the time elapsed since the token was last used, for example “Last used 3 days ago”. Hover over it to see the exact date and time in UTC. Use it to identify tokens that are no longer in use before you delete them. The Last used label is not displayed when no usage has been recorded for the token.Delete a Token
To remove an API token:- Locate the token in the Token API list
- Click the delete icon (trash icon) next to the token
- Confirm the deletion
Edit a Token
This functionality is not yet available. To modify a token, you’ll need to
delete the existing one and create a new token.