Access Tokens

Tokens are keys generated on the Kondado platform that allow programmatic interaction of other applications with our APIs and Webhooks.

With token access, your applications can:

- Create and edit sources, destinations, pipelines, and models;  
- Trigger pipelines;  
- Receive data in your destination via webhooks.  

The flexibility of these applications comes with the same level of security offered by our platform.

See below how to interact with your tokens:

Accessing the Tokens Page

1) Once logged in, click on your email (top-right menu) and then on "Settings":

2) On the settings page, locate the "Tokens" section:

3) You will see the tokens page, where you can create, activate, or deactivate existing tokens. Tokens are linked to the user who created them. On this page, there are two (2) types of tokens: those related to the Via Kondado destination ("Via Kondado Tokens") and those created by users (listed under "Tokens", next to the "CREATE +" button):

Creating New Tokens

4) To create new tokens, click on "CREATE +":

5) In the text box that opens, type a description for the token and click "OK". We recommend that this description relates to the token's purpose (e.g., to receive leads from RDStation) and that you use one token for each different application. Currently, there is no limit to the number of tokens you can have in an account:

6) After clicking "OK", our platform will generate your token. It consists of two parts:
 - Token Key: Analogous to a username used to log into a website, the token key acts as the username.  
 - Token: This information is similar to a password and will only be displayed at the time of creation. Store it in a safe place (or directly in the application interacting with Kondado).  

After noting the token, click "OK":

7) Done! Your new token has been created:

Managing Your Tokens

8) Once you have tokens created, you can activate or deactivate them at any time by toggling the switches on the right. Deactivating a token will render it inaccessible:

We recommend periodically “rotating” your tokens. To do this, deactivate an old token, create a new one, and replace the old token in your application.

Create and Manage Access Tokens on Kondado

Generate, secure, and maintain API tokens for programmatic access to Kondado's pipelines, sources, destinations, and webhooks.

1
Access your account settings

Log in to the Kondado platform, click your email address in the top-right menu, and select "Settings" to reach the configuration area.

2
Navigate to the Tokens section

On the settings page, find the "Tokens" section to view existing tokens ("Via Kondado Tokens" and user-created tokens) and access the creation tools.

3
Create a new token

Click "CREATE +", enter a description tied to the token's purpose (for example, "Receive leads from RD Station"), and click "OK". Use one token per application so you can rotate or revoke them independently.

4
Securely store the Token Key and Token

Copy the Token Key (used as the username) and the Token (used as the password). The Token is shown only at creation time - store it in your application or a password manager before clicking "OK". If lost, you must create a new token.

5
Activate or deactivate tokens as needed

Toggle the switch next to a token to activate or deactivate it. Deactivating a token blocks any application using it from interacting with the Kondado APIs and webhooks, without affecting other tokens.

6
Rotate tokens periodically

Deactivate old tokens, create replacements with clear descriptions, and update the credentials in your application. Rotating tokens limits exposure if a token is ever compromised.

Frequently asked questions

What can I do with an Access Token on Kondado?
Access Tokens enable programmatic interaction with Kondado's APIs and Webhooks. Your applications can create and edit sources, destinations, pipelines, and models; trigger pipeline runs; and receive data in your destination via webhooks.
How many Access Tokens can I create in my account?
Currently, there is no limit to the number of tokens you can have in a Kondado account. We recommend creating one token per application with a descriptive name tied to its specific purpose.
Why can I only see my Token once during creation?
The Token (similar to a password) is displayed only at creation for security reasons. You must store it immediately in a safe place or directly in the application that will interact with Kondado. If lost, you'll need to create a new token.
What's the difference between "Via Kondado Tokens" and user-created Tokens?
The tokens page shows two types: "Via Kondado Tokens" related to the Via Kondado destination, and user-created tokens listed under "Tokens" next to the "CREATE +" button. Both are managed on the same page but serve different integration purposes.
How do I revoke access for an application using my token?
Simply toggle the switch to deactivate the token on the tokens page. Deactivation immediately renders the token inaccessible, cutting off that application's access without affecting other tokens or data integrations.
What is token rotation and why should I do it?
Token rotation is the practice of periodically deactivating old tokens, creating new ones, and replacing them in your applications. This security measure limits exposure if a token is compromised and aligns with credential management best practices.

Written by·Published 2023-07-17·Updated 2026-04-26