What are personal tokens used for?
Personal tokens act as API keys and are used to authenticate requests between Trackdesk and external systems.
They are commonly used in:
API integrations with Trackdesk
Tools like Zapier
Integrations such as WooCommerce tracking
Any system that connects to Trackdesk via API
Every token belongs to one account and works with that account's permissions. To see how this works, and when OAuth2 or an AI assistant connection fits better, see Connect to Trackdesk: API, MCP and AI Assistants.
You can find more details about available endpoints in our API documentation. If you are connecting an AI agent or another programmatic client, the full API is also available as a machine-readable OpenAPI specification.
Where to find your personal token
You can access your personal token directly in the platform settings:
Navigate to Settings.
Click Your Trackdesk identifiers in the top right corner.
In this modal, you will find:
Tenant ID
Personal access token
Revenue Origin ID (if applicable)
Managing personal tokens
Navigate to Settings → Integrations → Personal tokens to see and manage all tokens in your program.
Tokens are split into Admin, Affiliate and Advertiser tabs, based on the role of the account that owns them. Each tab shows how many tokens it holds. The Advertiser tab appears only in network programs.
Each row shows the token description, its owner, a shortened version of the token and the date it was created. Click the copy icon to copy the full token, or the delete icon to revoke it. Tokens that belong to other admins and team members stay hidden: you can see and delete them, but not copy them.
Create a token for an affiliate or advertiser
You can create a token on behalf of a specific affiliate or advertiser, for example when you set up an integration for them:
Navigate to Settings → Integrations → Personal tokens.
Open the Affiliate or Advertiser tab.
Click Generate new token.
Fill in the fields described below and click Generate new token to confirm.
Account: The affiliate or advertiser the token belongs to. Only enabled accounts are listed.
Token description: A short description that helps you recognize the integration later.
The token reaches only that account's own data: their offers, coupons, balances, payouts and reports. Tokens you create on the Admin tab belong to your own account.
Let affiliates and advertisers generate their own tokens
By default, affiliates and advertisers can't generate tokens themselves. To allow it:
Navigate to Settings → Integrations → Personal tokens.
In Access token permissions, switch on Allow affiliates and advertisers to generate their own access tokens.
Click Save.
Your affiliates and advertisers then find a Personal token page under Tools → Integrations, where they can generate, copy and delete their own tokens.
Switching the option off stops new tokens from being generated. Existing tokens stay valid, and affiliates who already have one still see the page so they can delete it. You can still create tokens for any affiliate or advertiser from the Affiliate and Advertiser tabs.
Important notes
⚠️ Important: Treat your personal token like a password. It gives access to sensitive data through the API. If a token is compromised, delete it immediately and generate a new one.
Personal tokens aren't available while you're signed in as another user. Sign back in to your own account to manage them.
Connecting an AI assistant? You don't need a token: sign in with OAuth2 instead.