> ## Documentation Index > Fetch the complete documentation index at: https://codebeans-cb-notifylyst.mintlify.site/llms.txt > Use this file to discover all available pages before exploring further. # Create an access token > How to issue, scope, expire, disable, regenerate and revoke AI connector access tokens. A token is what an AI client presents to prove it may use your store's Notifylyst data. It carries three things: **which store**, **which tools**, and **until when**. In Notifylyst, open **Settings → Developers → AI connectors (MCP)**. ## The Connector card The top card is the store-wide switch and the address your clients connect to. | Item | What it is | | - | - | | **On** / **Off** badge, **Turn off** / **Turn on** | The master switch for your store. While it is off, the tab says "MCP is turned off for this store. Every token is refused…" — every token stops working until you turn it back on. | | **Connector URL** + **Copy** | The address you paste into your AI client. | | Three steps and **Setup guide** | The short version of [Connect Claude](https://codebeans-cb-notifylyst.mintlify.site/mcp/setup/connect-claude.md). | | "Rate limit on your plan: N requests a minute." | How many requests each token may make per minute. See [Plan limits](#plan-limits). | If the card says "The AI connector isn't available for this store yet. Contact support…", contact Notifylyst support from inside the app. ![The Connector card on the AI connectors (MCP) tab: the On badge, the Turn off button, the Connector URL with its Copy button, the three setup steps with the Setup guide link, and the plan's rate limit.](https://mintcdn.com/codebeans-cb-notifylyst/helB_Y1ZQRw5r3Uo/images/a1-mcp-tab.png?fit=max\&auto=format\&n=helB_Y1ZQRw5r3Uo\&q=85\&s=295e7babc7eb2076a5174fbfb17c232b) ## Create a token In the **Access tokens** card, press **Create token**. The **Create access token** dialog opens. **1. Name it after the client** Fill in **Token name** — *"Claude Desktop"* tells you what to revoke six months from now. Left empty, the token is called "AI Connector Key". One token per client is the right habit: each is independently revocable, and **Last used** then tells you which client has gone quiet. **2. Choose an expiry** **Expires** offers **Never expires**, **30 days**, **60 days**, **90 days** or **Custom date…**. A custom date opens an **Expiry date** picker; the token works until the end of that day, and the date must be in the future. Set an expiry for anything temporary — an agency, a contractor, an experiment. **3. Choose what it can do** Under **What it can do**: | Option | What the token gets | | - | - | | **Read only** | All 9 read tools. It can look at your data but never change it. | | **Read and change** | All 16 tools, including ones that change settings and subscribers. | | **Pick tools** | Only the tools you tick, in two groups: **Read** and **Change (writes to your store)**. | The app checks the token's tools on every call, so a token can only ever use what you chose here. See [All 16 tools](https://codebeans-cb-notifylyst.mintlify.site/mcp/reference/tools.md) for what each one does before you decide. > [!TIP] > > **Start with Read only.** Nine read tools answer almost every question worth asking. Create a > second token with change tools later, once you know which actions you actually want an agent > taking. ![The Create access token dialog: Token name, the Expires choice, and What it can do with Read only, Read and change and Pick tools.](https://mintcdn.com/codebeans-cb-notifylyst/helB_Y1ZQRw5r3Uo/images/a2-create-token.png?fit=max\&auto=format\&n=helB_Y1ZQRw5r3Uo\&q=85\&s=dd2f6b7ec47f9028d4edfafa3bb48ce3) ## Copy the token immediately Right after you create it, a banner says "Copy your token now. It won't be shown again." It holds the token in a **New token** field, a switch for your AI client with a ready config block, and a **Done** button. The token starts with `nl_mcp_`. Notifylyst stores it hashed and keeps only the last four characters for display, so it can never be shown again. > [!CAUTION] > > **Never paste a token into a chat, a shared document, a ticket or a screenshot.** Anyone holding > it has exactly the access you granted. If one leaks, press **Regenerate** — the old secret stops > working. ![The banner shown right after creating a token: Copy your token now. It won't be shown again. The New token field with the token blurred, the client switch, a ready config block, and the Done button.](https://mintcdn.com/codebeans-cb-notifylyst/helB_Y1ZQRw5r3Uo/images/a3-token-once.png?fit=max\&auto=format\&n=helB_Y1ZQRw5r3Uo\&q=85\&s=223f0cf621824e25de1f7c3d9cac3661) ## Managing tokens afterwards The **Access tokens** table lists every token: | Column | Shows | | - | - | | **Name** | The token name and the last four characters of the token. | | **Access** | **Read and change**, **Read only**, or the number of tools you picked. | | **Expires** | The expiry date, or **Never**. | | **Status** | **Active**, **Disabled** or **Expired**. | | **Last used** | The date it was last used, or **Never**. | | **Actions** | The actions below. | | Action | What it does | When to use it | | - | - | - | | **Disable** / **Enable** | Switches the token off or back on. Nothing is deleted. | Pausing a client, or isolating one while investigating something. | | **Regenerate** | Asks "New secret? The old one stops working." and issues a new secret for the same token, keeping its name, tools and expiry. | You lost the token, or you think it leaked. | | **Copy config** | Copies a ready config for this token, with a `` placeholder where the secret goes. | Setting up a client that takes a config file — see [Other AI clients](https://codebeans-cb-notifylyst.mintlify.site/mcp/setup/other-clients.md). | | **Revoke** | Asks "Revoke this token?" and deletes it. | The client is gone for good. | > [!WARNING] > > **Two things can't be changed later.** A token's tools can't be edited — create a new token with > the tools you want. And an expired token can't be disabled, enabled or regenerated: create a new > one instead. ![The Access tokens table with its Name, Access, Expires, Status, Last used and Actions columns, showing the Disable, Regenerate, Copy config and Revoke actions.](https://mintcdn.com/codebeans-cb-notifylyst/helB_Y1ZQRw5r3Uo/images/a4-token-list.png?fit=max\&auto=format\&n=helB_Y1ZQRw5r3Uo\&q=85\&s=485f4e2f9aa86501b01fe0c8b9b60b66) ## Plan limits Your plan sets how many tokens you can have and how many requests a minute each one may make. The **Access tokens** card shows "X of N tokens used on your plan". At the limit, **Create token** is disabled and the app says "Your plan allows up to N tokens. Revoke one to create another." On a plan without the connector it says "Your plan does not include AI connector tokens. Upgrade to create one." | Plan | Tokens | Requests a minute | | - | - | - | | Developer | 2 | 30 | | Lite | 2 | 30 | | Startup | 3 | 100 | | Small Business | 3 | 100 | | Medium | 5 | 300 | | Enterprise | Unlimited | 1,000 | Check the **Plans** page in the app for your plan's current figures. ## Next [Connect Claude](https://codebeans-cb-notifylyst.mintlify.site/mcp/setup/connect-claude.md) — where the token gets used. This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.