# API Tokens
The guidelines assume that you've set up Email Sandbox and use the corresponding [API v2](https://docs.mailtrap.io/developers/email-sandbox/sandboxes-inboxes).
#### Add and manage tokens manually
{% stepper %}
{% step %}
Navigate to **Settings** in the menu on the left and select **API Tokens**.
{% endstep %}
{% step %}
To add a new token, click the **Add Token** button in the upper-right corner.
{% endstep %}
{% step %}
**Type the token name** into the designated field.
It’s perfectly fine to have a custom name for the API token, as it’s only for your reference, regardless of the use case.
{% endstep %}
{% step %}
**Assign permissions** by checking the boxes in the corresponding access level columns. Note that you must have admin permissions on a particular domain to send emails with this token.
{% endstep %}
{% step %}
Click the **Save** button and preview the new token under the **API Tokens** main menu.
{% endstep %}
{% endstepper %}
#### Auto-created token per domain
When you create a domain, a token is automatically created and named based on the following formula: \[domain name] + \[token] + \[token ID].
For example, if you add the example.com domain, the token for that domain will be named example.com token 1234. By default, the automatically generated token gets Domain Admin Mailtrap for the given domain.
{% hint style="info" %}
You'll need to edit permissions for the automatically generated token to allow for authorization on other domains.
{% endhint %}
#### Where to find tokens?
**SMTP Integration**
The automatically assigned token per domain is under the **Integration** tab in **Domains**. Choose the desired stream, click **Integrate**, and toggle the switch to **SMTP**. SMTP password is the same as the API Token.
#### Settings > API Tokens
Select **Settings** in the left menu, then **API Tokens**. You'll see all active tokens, their creator, and their access level.
Click the three-dot menu to the far right of the specific user token and select Edit permissions.
{% hint style="info" %}
**Important notes:**
* You can also give Account Admin access to the token and get access to all Projects, Sandboxes, and domains on that account.
* If you want to test how it works, you need to get authenticated using your API token. Mailtrap uses Bearer Authentication, so you must pass the token under the Authorization header of your email.
{% endhint %}
### Reset token
There are two ways to reset API tokens:
#### Resetting API tokens in the Sandboxes
To reset tokens, go to your Sandbox under the **Sandboxes** tab and click the **Reset Credentials** function next to your credentials.
Then confirm your choice with the **OK** button.
#### Resetting API Tokens from the API Tokens menu
Go to API Tokens, click the three-dot menu icon next to the token you want to reset, and click Reset API Token.
Confirm your choice by clicking on the corresponding button.
{% hint style="warning" %}
**Important notes:**
* After clicking the Reset credentials or Reset API Token buttons, the existing token becomes invalid after 12 hours. So, you have a 12-hour window to update all apps that use the old API token. Once the old token expires, some parts of your application will not work properly unless you've updated the token. All expired tokens get deleted from your account within 24 hours after expiration.
* After the API token is reset and expired, a new token is created. The token ID is added to the token name the same way it's done for automatically generated tokens, e.g., mailtrap.example token 4231.
{% endhint %}
### Edit permissions
As mentioned earlier, click the menu icon at the far right of a token and select Edit permissions.
Click on the corresponding boxes to add or remove token permissions. Then, confirm your selection with the Save button.
### Delete token
To delete a token, click the three-dot menu icon and choose the **Delete token** option.
Confirm the action by clicking the **Confirm** button.
{% hint style="warning" %}
**Important:** Keep in mind that a token is deleted immediately, and you can't delete the last token per domain.
{% endhint %}
---
# Agent Instructions: Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter:
```
GET https://docs.mailtrap.io/email-sandbox/setup/api-tokens.md?ask=
```
The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.