---
title: "REST API & Personal API Tokens"
description: "Drive ApproveThis from your own systems: create workflows, submit requests, approve or deny them, and register webhooks through an authenticated REST API."
category: "Ways requests arrive"
updated: 2026-08-27
canonical: https://approvethis.com/docs/manuals/rest-api
---

# REST API & Personal API Tokens

Personal API tokens are how an admin gets ApproveThis talking to another system. A token authenticates calls to the v1 REST API, where your code can create workflows, submit requests against a published workflow, record approvals or denials, and manage outbound webhook subscriptions. Tokens are created on the Integrations page, and the token value appears exactly once — at creation. You'll need admin access and the Integrations page open in your workspace.

**Who this is for:** an Administrator.

> **Prerequisite:** Sign in as an Administrator.

> **Getting here:** Open Integrations from the sidebar (shown to admins).


## On the 'API Tokens' tab, create a token named for what will use it, and copy it from the one-time reveal

Any script or service that calls the v1 REST API needs a bearer token, and naming it after its consumer keeps the list readable when several systems are connected. Two things to plan for: tokens are all-or-nothing (there are no scoped or least-privilege keys), and every v1 call requires an active subscription — teams without billing access get a 402 response.

1. Sign in as an admin, since the Integrations page and its token controls are shown to admins.
2. Click **API Tokens** to switch to the token tab.

   ![Click API Tokens to switch to the token tab.](https://approvethis.com/docs-assets/manuals/rest-api/screenshots/rest-api-s1-01.png)

3. In **Token Name**, type a name identifying the system or script that will use this token; the example uses `Reporting script`.

   ![In Token Name, type a name identifying the system or script that will use this token; the example uses Reporting script.](https://approvethis.com/docs-assets/manuals/rest-api/screenshots/rest-api-s1-02.png)

4. Click **Create token**.

   ![Click Create token.](https://approvethis.com/docs-assets/manuals/rest-api/screenshots/rest-api-s1-03.png)


> **Success cue:** The **Please copy your new API token. For your security, it won't be shown again.** message appears with the token above it — copy it now, because reopening the page will not show it again.

> **What happens next:** The revealed token is shown once — store it where the calling system keeps its secrets. Use it as a Bearer token against the v1 REST API under /api/v1: list and create workflows, read a workflow's form fields, submit requests against a published workflow, approve or deny pending approvals, and manage outbound webhook subscriptions. The interactive API reference at /docs/api documents every endpoint. Every call requires an active subscription, requests are immutable over the API (read and decide — never edit or delete a submitted request), and requests cannot be created against an unpublished workflow.