How do I get a personal API token?

Steps

1. Ask an admin on your team to issue the token. Creating tokens needs the user:manage permission.
2. The admin opens Administration → Users and finds your user.
3. Next, they create or regenerate an API token for that user.
4. Copy the token the moment it appears. The raw secret shows one time only, and nobody can read it back later, not even the admin.
5. Paste it into CYBERLOP_API_TOKEN in your CI settings, or into a password manager.

Good to know

Your token carries your permissions and your group scope. Anything you can do in the app, a script that holds the token can do through the API, so treat it like a password and never commit it to a file.

You will not find it under My Account. That page holds your email notifications, a personal Git token and a personal AI credential, not API tokens.

Plans decide whether tokens exist for you. Open Settings → Plan & usage and look for the API & CI tokens feature chip.

The Administration screens are admin-only, so the exact buttons are not listed here. No Administration entry in your sidebar means you are not an admin, and the person who is can usually do this in a minute. Without anyone on your team who has that access, write to us through the contact page.

Once you have the token, set it up in CI by following which secrets to add. To use it directly, read how to authenticate API requests. The background is in API tokens and permissions.

Related questions

• How do I authenticate requests to the Cyberlop API?
• I lost my API token. Can I see it again?
• How do I revoke a user's API tokens?
• Which secrets do I need to add to my repository for CI scans?
• Why does my API call return a permission error?

Full tutorial

Cyberlop API tokens and permissions: how to issue and limit them

Step-by-step, with annotated screenshots.

Updated 8 October 2026 · Back to the help centre