Skip to main content
The Laravel Cloud API uses token-based authentication. You can generate an API token from your Laravel Cloud organization settings. Once you have your token, include it in the Authorization header of your API requests as follows: 
Authorization: Bearer YOUR_API_TOKEN

​
Managing API Tokens

You can manage your API tokens from your Laravel Cloud organization settings. Navigate to the API tokens section to create, view, and revoke your tokens. API Tokens management interface in Laravel Cloud settings

​
Create an API Token

To create a new API token, follow these steps:
  1. Navigate to your Laravel Cloud organization settings
  2. Click on the “API tokens” section in the sidebar
  3. Click the “Create API Token” button
  4. Enter a descriptive name for your token to help you identify its purpose
  5. Select an expiration period for the token
  6. Click “Create” to generate your new API token
Make sure to copy your API token immediately after creation, as it will only be displayed once for security reasons. Store it securely and never share it publicly.

​
Revoke an API Token

To revoke an API token that you no longer need or that may have been compromised, follow these steps:
  1. Navigate to your Laravel Cloud organization settings
  2. Click on the “API tokens” section in the sidebar
  3. Find the API token you want to revoke in the list
  4. Click the “Revoke” button next to the token
  5. Confirm your password when prompted
  6. Click “Revoke API token” to permanently delete the token
Once an API token is revoked, it cannot be restored. Any applications using this token will immediately lose access to the API. Make sure to update your applications with a new token before revoking the old one if you need continued access.

​
API Token Expiration

API tokens have configurable expiration periods to help maintain security. When creating a new token, you can choose from the following expiration options:
  • 1 month - Recommended for short-term projects or testing
  • 6 months - Good balance between security and convenience
  • 1 year - Suitable for long-term integrations
Once a token expires, it will no longer be valid for API requests and you’ll need to generate a new one. Make sure to update your applications with the new token before the old one expires.