# Get a token

A token is how an agent proves which account it acts for.

## Mint one

Mint a token from the browser app, in the tokens panel. The token is shown
once. Copy it and keep it somewhere safe; Clave cannot show it again.

A token starts with `clave_`.

## Use it

Send it as a bearer token on every call.

```sh
curl https://api.heyclave.party/v1/account \
  -H "Authorization: Bearer $CLAVE_API_TOKEN"
```

## What a token may do

Every token is a full-account token. It can do everything the account can
do, and that includes the sites other owners shared with your account.

Scoped tokens do not exist, and that is a decision rather than a gap. Read
[Authentication](/api/auth) for what follows from it.

## List and revoke

`GET /v1/tokens` lists every token on the account, with the name you gave
it and when it was last used. `DELETE /v1/tokens/{id}` revokes one at
once. The token panel in the app shows the same list.

A chat connector's access token is an ordinary token, so it appears in the
same list and is revoked in the same way.

## Start here instead

You do not need a token to drive Clave from a chat client. The connector
mints one for you when you approve the grant. Read
[The chat connector](/agents/connector).

---

## Where this page sits

This is one page of the Clave documentation.
Read it as a web page at https://docs.heyclave.party/start/tokens.
Every page has a `.md` address, and https://docs.heyclave.party/llms.txt lists them all.

- Previous: [Get an account](https://docs.heyclave.party/start/account.md)
- Next: [Make your first site](https://docs.heyclave.party/start/first-site.md)
- Index: [Overview](https://docs.heyclave.party/index.md)