Revoke and regenerate a Snyk API token

How to revoke and regenerate a Snyk API token, and the effect on integrations

Snyk is rolling out a new navigation. The steps on this page describe the classic interface. If your view looks different, visit Navigate the Snyk Web UI to map these options to the new interface.

Revoke and regenerate a Snyk API token

When an API token is revoked, all integrations using that key immediately stop working. Proceed with caution!

If you suspect an API token has been leaked, it is good practice to revoke that token and generate a new one to use in its place.

To revoke your Snyk user API token, navigate to your personal General Account Settings in the Snyk Web UI at app.snyk.io/account.

API token screen, Revoke & Regenerate button

Click the Revoke & Regenerate button to revoke your API token. A new one will be generated in its place. You can now copy the newly generated API token and update integrations that used the old token.