Token (API)
A credential string used to authenticate API requests. Tokens are either long-lived (API keys) or short-lived (OAuth access tokens). Short-lived tokens require automated refresh logic to prevent authentication failures in long-running workflows.
Expert insight
API tokens that never expire are convenient and dangerous in equal measure, if one leaks (committed to a public repo, pasted into a chat), it's valid until manually revoked. Where a service supports short-lived tokens with refresh flows, using them limits the blast radius of an eventual leak.
In a real workflow
An API token stored as a credential authenticates requests to the accounting system.
Common mistakes
- Sharing one token between many workflows and people.
- Not rotating tokens after staff changes.
Complexity level
Requires some familiarity with automation concepts.
Related terms
API Key
A secret token that authenticates your automation with a third-party service. Tr…
OAuth (Open Authorisation)
An authentication standard that lets users grant third-party apps access to thei…
JWT (JSON Web Token)
A compact, self-contained authentication token used by many APIs. JWTs expire an…
See it in action
Want Token (API) built into your automation?
Book a free audit and we'll show you exactly how this applies to your business.
Get my free automation plan →Who we build for
Run a firm, an agency or an online store? We automate the work behind it.
Done-for-you n8n workflows and Claude AI agents, fixed price, maintained for you.
- Professional firms Onboarding, documents, billing and reporting run on their own. See what we automate →
- Agencies and SaaS teams Custom n8n and Claude builds, client reporting and internal tools. See what we automate →
- E-commerce brands Orders, support, returns and stock handled without the busywork. See what we automate →
More in Security
Keep exploring
Webhook security
Verifying that incoming webhooks are genuinely from the expected sourc…
Access token
A short-lived credential issued after OAuth authentication that grants…
Audit trail
A chronological record of all actions taken by an automation who trigg…
Client credentials flow
An OAuth flow where a server-side application authenticates directly u…
Data residency
Where data is physically stored and processed. Regulated industries (f…
Data sovereignty
The principle that data is subject to the laws of the country where it…
Go deeper
Guides that cover Token
Chargebee vs Recurly in 2026: Pricing, Dunning, B2B vs B2C and Which One Fits
Chargebee vs Recurly compared head to head: real cost at $100K, $500K and $2M in billing, pricing models, dunning and payment recovery, revenue recognition, integrations and a clear pick for B2B SaaS and consumer subscriptions.
Anatomy Claude skill: what it is, how to install it, and 28 live examples
The open-source Anatomy skill turns an idea into an interactive isometric machine. What it makes, how to install and use it in Claude Code, and what we learned building 28 live figures.
n8n HTTP Request Node: Complete Documentation and Examples
The HTTP Request node is the most used node in n8n, connecting your workflows to any API or web service. This guide covers every configuration option, authentication method, error handling pattern, and real-world example you need.