API Tokens
The guidelines assume that you've set up Email Sandbox and use the corresponding APIv2.
Add and manage tokens manually
Navigate to Settings in the menu on the left and select API Tokens.

To add a new token, click the Add Token button in the upper right corner.

Type the token name into the designated field.
It’s perfectly fine to have a custom name for the API token, as it’s only for your reference, regardless of the use case.

Assign permissions by checking the boxes in the corresponding access level columns. Note that you must have admin permissions on a particular domain to send emails with this token.

Click the Save button and preview the new token under the API Tokens main menu.

Auto-created token per domain
When you create a domain, a token is automatically created and named based on the following formula: [domain name] + [token] + [token ID].
For example, if you add the example.com domain, the token for that domain will be named example.com token 1234. By default, the automatically generated token gets Domain Admin Mailtrap for the given domain.
Where to find tokens?
SMTP Integration
The automatically assigned token per domain is under the Integration tab in Sending Domains. Choose the desired stream, click Integrate, and toggle the switch to SMTP. SMTP password is the same as the API Token.

Settings > API Tokens
Select Settings in the left menu, then API Tokens. You'll see all active tokens, their creator, and their access level.

Click the three-dot menu to the far right of the specific user token and select Edit permissions.

Reset token
There are two ways to reset API tokens:
Resetting API tokens in the Sandboxes
To reset tokens, go to your Sandbox under the Sandboxes tab and click the Reset Credentials function next to your credentials.

Then, click Reset Credentials and confirm your choice with the Yes, Reset button.

Resetting API Tokens from the API Tokens menu
Go to API Tokens, click the three-dot menu icon next to the token you want to reset, and click Reset API Token.

Confirm your choice by clicking on the corresponding button.

Tip: The three-dot menu icon next to the token also allows you to copy a token to your clipboard.
Important notes:
After clicking the Reset credentials or Reset API Token buttons, the existing token becomes invalid after 12 hours. So, you have a 12-hour window to update all apps that use the old API token. Once the old token expires, some parts of your application will not work properly unless you've updated the token. All expired tokens get deleted from your account within 24 hours after expiration.
After the API token is reset and expired, a new token is created. The token ID is added to the token name the same way it's done for automatically generated tokens, e.g., mailtrap.example token 4231.
Edit permissions
As mentioned earlier, click the menu icon at the far right of a token and select Edit permissions.

Click on the corresponding boxes to add or remove token permissions. Then, confirm your selection with the Save button.
Delete token
To delete a token, click the three-dot menu icon and choose the Delete token option.

Confirm the action by clicking the Confirm button.

Important: Keep in mind that a token is deleted immediately, and you can't delete the last token per domain.
Last updated
Was this helpful?

