How to Manage API Tokens in cPanel

API tokens let external tools and scripts access your cPanel securely without using your password. Managing them well keeps automation safe.

What tokens are for

An API token is a long, unique key that authorises a specific tool to perform actions in cPanel — useful for automation, monitoring or integrations — without exposing your main password.

Create and scope them

In Manage API Tokens, generate a token for each tool and, where possible, limit what it can do. Give each integration its own token so you can track and revoke them individually.

Revoke when done

Delete tokens for tools you no longer use, and rotate them periodically. If a token is ever exposed, revoke it immediately — that disables the access without affecting your password or other tokens.