Sprintree
Sign inGet started

Account

Access tokens

Create and revoke personal access tokens for scripts and MCP clients that need them.

Last updated

Give a script access to Sprintree#

A personal access token is a secret that lets a script or compatible client act through your account. Create one when a tool needs a token rather than the normal sign-in or OAuth connection.

For example, a small script that reads your project cards may need a token. An assistant connected through OAuth can use that authorization instead.

Create a token#

  1. Open account Settings, then API & MCP.
  2. Find Personal access tokens and click New token.

  1. Enter a name that tells you which tool uses it.
  2. Choose Full access for API and MCP access to your projects, or Agent runs only for the coding agent hooks that report session progress.
  3. Click Create token. Copy the token immediately and save it in the tool's secret configuration. Sprintree shows the complete token only once.
  4. Click Done after you have stored it.

Revoke a token#

Find the token in Personal access tokens, click its Revoke control and confirm Revoke. Tools using that token lose access immediately.

Tips and common mistakes#

  • Tokens do not expire. They work until you revoke them. Revoke the ones you no longer use.
  • Treat a token like a password. Do not put it in a card, page, screenshot or shared document.
  • Give each tool a separate token so you can revoke it independently.
  • If you lose the secret, create a replacement. The token list shows only a hint.
  • Full access acts as you. Use the narrower Agent runs only option when you only need those hooks.
  • Connected apps authorized with OAuth appear separately. Use their Disconnect control to remove that authorization.