Skip to content

Tokens

The Tokens section does not belong directly to a chat. It belongs to a specific application.

A token is a secret key issued inside an application and then used by an external system to call the API.

Where Tokens Are Created

Tokens are created inside the application card:

  1. Open the bot in private messages.
  2. Go to /settings.
  3. Open Private Settings.
  4. Open My applications.
  5. Select the required application.
  6. Click the token issuance button.

So token management is inside the application, not inside a specific chat's settings.

What a Token Has

A token has:

  • a name
  • an internal identifier
  • the token value
  • a set of permissions

Token permissions are selected during creation.

How to Create a Token

  1. Open the required application.
  2. Click the token creation button.
  3. Send the token name.
  4. Select token permissions.
  5. Confirm creation.

After that, the bot sends the token value in a separate message.

How Token Permissions Are Chosen

A token cannot receive permissions that are not enabled on the application itself.

So the application permissions are configured first, and then the token permissions are selected from that set.

This allows you to:

  • keep different tokens with different access levels
  • issue separate tokens for separate services
  • avoid giving every token all available permissions

How to View a Token

  1. Open the application.
  2. Select the required token from the list.

In the token card you can see:

  • its name
  • its identifier
  • the permissions granted to it

How to Delete a Token

  1. Open the application.
  2. Select the required token.
  3. Click the delete button.

After deletion, the token will stop working.

When It Is Better to Issue Separate Tokens

Separate tokens are better if:

  • you have several external services
  • different services need different permissions
  • you want to disable one access path without affecting the others

The usual practice is one token per integration.

Important

  • the token value is shown at creation time in a separate message
  • the token belongs to the application, not to a single chat
  • chat access is determined not only by the token, but also by the application link to the chat
  • if the application is not linked to the chat, the token alone will not provide access to that chat

Related articles: