> ## Documentation Index
> Fetch the complete documentation index at: https://docs.corvic.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Access Tokens

> Create, scope, and revoke the tokens that let scripts and clients call Corvic over MCP.

An access token lets a client call Corvic without an interactive sign-in. Send it on every request:

```text theme={null}
Authorization: Bearer <token>
```

[Open Access Tokens ↗](https://app.corvic.ai/settings/accessTokens)

Assistants that support sign-in (Claude, ChatGPT, Grok, Muse, Cursor, VS Code) don't need a token: they sign you in with Corvic instead. Use a token for scripts, backends, agent frameworks, or any client that only accepts headers.

## Which token to use

| Token | Reaches | Create it in |
| - | - | - |
| **Organization token** | Every room you can open in the organization | [**Settings → Access Tokens**](https://app.corvic.ai/settings/accessTokens) |
| **Room token** | One room only | That room's [MCP Playground](https://docs.corvic.ai/mcp-connect/playground.md) |
| **Agent token** | One deployed agent, through [Agent MCP](https://docs.corvic.ai/mcp-connect/agent-mcp.md) | The agent's **Integration & Sharing → Integration** tab |

Pick the narrowest token that does the job. A room token is the right choice for an integration that only needs one room.

> [!NOTE]
>
> The API keys on [**Settings → Models → Use via API**](https://app.corvic.ai/settings/model) are for the [model gateway](https://docs.corvic.ai/models/api-playground.md) only. They can't call MCP tools.

## Create an organization token

**1. Open Access Tokens**

Go to [**Settings → Access Tokens**](https://app.corvic.ai/settings/accessTokens) and choose **Create Access Token**.

**2. Describe it and set an expiry**

Add a **Description** that says where the token will be used, such as *Nightly sync from data warehouse*, and choose how long it lasts.

**3. Copy it now**

The token is shown once. Store it in a secrets manager or an environment variable such as `CORVIC_TOKEN`.

## Create a room token

Open the room's **MCP Playground** and choose **Create token** (or **New token**), then pick how many days it lasts. The token can reach that room and nothing else.

## Revoke a token

Every token you create, organization or room, is listed under [**Settings → Access Tokens**](https://app.corvic.ai/settings/accessTokens) with its scope. Select tokens and revoke them; clients using them stop working on their next call.

> [!WARNING]
>
> Treat tokens like passwords. Don't commit them to source control or paste them into chats. Choose the shortest expiry that works, and revoke tokens you no longer use.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.