Create an API token
How to create an API token for the Nori API – with exactly the scopes your integration needs.
Updated 2 Nov 2026
For the Nori API you need a personal access token. It is bound to you and to the team you create it in, and only works for the areas you grant. API access is included in the Team plan.
Your token in a few steps
-
1
Open API tokens
Account menu in the bottom left → “Account” → “API Tokens” tab → “Create token”. -
2
Name it
Enter a “Token name” that tells you later what the token is for – “Bookkeeping sync”, for example. -
3
Choose scopes
For each area – invoices, proposals, documents, time entries, customers, products and more – pick “No access”, “Read” or “Read & write”. “Grant full access” sets everything at once. Grant only what you need. -
4
Set an expiry
Under “Expires after” choose up to 365 days. Left empty, the token expires after 90 days. -
5
Copy the token
After “Create token”, Nori shows the token exactly once. Copy it and store it safely before you close the dialog.
The list later shows each token’s scopes, when it was created and last used, and when it expires. “Revoke” withdraws a token immediately – applications using it lose access.
Anyone holding your token can call the API on your behalf. Never commit it to a code repository – keep it in an environment variable or a secret store.
Still stuck?
Contact support