# Access tokens

## Give a script access to Sprintree

A personal access token is a secret that lets a script or compatible client act through your account. Create one when a tool needs a token rather than the normal sign-in or OAuth connection.

For example, a small script that reads your project cards may need a token. An assistant connected through OAuth can use that authorization instead.

## Create a token

1. Open account **Settings**, then **API & MCP**.
2. Find **Personal access tokens** and click **New token**.

![API and MCP settings with New token highlighted](https://sprintree.com/docs-media/tokens-list-light-ad7fb6a3.webp)

3. Enter a name that tells you which tool uses it.
4. Choose **Full access** for API and MCP access to your projects, or **Agent runs only** for the coding agent hooks that report session progress.
5. Click **Create token**. Copy the token immediately and save it in the tool's secret configuration. Sprintree shows the complete token only once.
6. Click **Done** after you have stored it.

![New personal access token dialog showing Name and Access choices](https://sprintree.com/docs-media/tokens-create-light-819438b6.webp)

## Revoke a token

Find the token in **Personal access tokens**, click its **Revoke** control and confirm **Revoke**. Tools using that token lose access immediately.

## Tips and common mistakes

- Tokens do not expire. They work until you revoke them. Revoke the ones you no longer use.
- Treat a token like a password. Do not put it in a card, page, screenshot or shared document.
- Give each tool a separate token so you can revoke it independently.
- If you lose the secret, create a replacement. The token list shows only a hint.
- Full access acts as you. Use the narrower Agent runs only option when you only need those hooks.
- Connected apps authorized with OAuth appear separately. Use their **Disconnect** control to remove that authorization.

## Related pages

- [Settings and preferences](https://sprintree.com/docs/settings-and-preferences) for account security.
- [Connect an AI agent](https://sprintree.com/docs/connect-an-ai-agent) for connecting an assistant, with or without a token.
- [Technical MCP reference](https://sprintree.com/docs/mcp) for every tool.
- [Members and roles](https://sprintree.com/docs/members-and-roles) for project permissions.