A personal token is an API key that lets an integration, such as Zapier, WooCommerce or your own script, call the Trackdesk API as one account and with that account's permissions. Admins manage all tokens in Settings → Integrations → Personal tokens and can let affiliates and advertisers generate their own.
What are personal tokens used for?
Personal tokens act as API keys and are used to authenticate requests between Trackdesk and external systems.
They are commonly used in:
API integrations with Trackdesk
Tools like Zapier
Integrations such as WooCommerce tracking
Any system that connects to Trackdesk via API
Every token belongs to one account and works with that account's permissions. To see how this works, and when OAuth2 or an AI assistant connection fits better, see Connect to Trackdesk: API, MCP and AI Assistants.
You can find more details about available endpoints in our API documentation. If you are connecting an AI agent or another programmatic client, the full API is also available as a machine-readable OpenAPI specification.
Where to find your personal token
You can access your personal token directly in the platform settings:
Navigate to Settings.
Click Your Trackdesk identifiers in the top right corner.
In this modal, you will find:
Tenant ID
Personal access token
Revenue Origin ID (if applicable)
Managing personal tokens
Navigate to Settings → Integrations → Personal tokens to see and manage all tokens in your program.
Tokens are split into Admin, Affiliate and Advertiser tabs, based on the role of the account that owns them. Each tab shows how many tokens it holds. The Advertiser tab appears only in network programs.
Each row shows the token description, its owner and the date it was created. Rows of your own tokens also show a shortened version of the token and a copy icon that copies the full token. Rows of tokens that belong to other accounts, including affiliates, advertisers and other admins, show "Only the account this token belongs to can see its value." and have no copy icon. Click the delete icon on any row to revoke that token.
Create a token for an affiliate or advertiser
You can create a token on behalf of a specific affiliate or advertiser:
Navigate to Settings → Integrations → Personal tokens.
Open the Affiliate or Advertiser tab.
Click Generate new token.
Fill in the fields described below and click Generate new token to confirm.
Account: The affiliate or advertiser the token belongs to. Only enabled accounts are listed.
Token description: A short description that helps you recognize the integration later.
After you save, the new token appears in the list without its value. Only the affiliate or advertiser it belongs to can see and copy it, under Tools → Integrations → Personal token.
The token reaches only that account's own data: their offers, coupons, balances, payouts and reports. Tokens you create on the Admin tab belong to your own account.
Let affiliates and advertisers generate their own tokens
By default, affiliates and advertisers can't generate tokens themselves. To allow it:
Navigate to Settings → Integrations → Personal tokens.
In Access token permissions, switch on Allow affiliates and advertisers to generate their own access tokens.
Click Save.
Your affiliates and advertisers then find a Personal token page under Tools → Integrations, where they can generate, copy and delete their own tokens. Below their tokens, an API reference row has an Open API reference link, which opens the API reference in a new tab, and shows Your account ID and Your revenue origin ID to copy. To verify the setting, sign in as an affiliate and open Tools → Integrations → Personal token.
Switching the option off stops new tokens from being generated. Existing tokens stay valid, and affiliates who already have one still see the page so they can delete it. You can still create tokens for any affiliate or advertiser from the Affiliate and Advertiser tabs.
Important notes
⚠️ Important: Treat your personal token like a password. It gives access to sensitive data through the API. If a token is compromised, delete it immediately and generate a new one.
While you're impersonating an affiliate or advertiser, their Personal token page under Tools → Integrations opens. You can generate and delete their tokens, but each token shows "Only the account this token belongs to can see its value." in place of its value and has no copy icon.
Connecting an AI assistant? You don't need a token: sign in with OAuth2 instead.