How Do I Create An API Token?

An API token, also called an API key, lets you authenticate with the Nozzle API so you can upload keywords, pull data, and manage your account programmatically. You can now create your own API key yourself, directly from the Users page, without contacting support. (Nozzle uses the terms API token and API key to mean the same thing.) This guide walks through creating a token, saving it safely, and using it.

Once you have a token, see How do I authenticate with the Nozzle API? for how to make your first request.

Create a token

1. In the left-hand navigation, click Settings, then Users.
2. Click Create API Token in the top right, next to Invite Users.
3. Check the token name. Nozzle pre-fills a default name with the current date, for example Nozzle API User (2026-06-25). You can keep that or replace it with something more descriptive, such as Reporting pipeline or Looker Studio connector. A name that says where the token is used will save you a guessing game later, and it becomes the name of the dedicated user that owns the token.
4. Click Create token.

Nozzle generates the token value for you automatically. You can't choose or set it yourself, which keeps tokens random and hard to guess.

Save your token right away

After you create the token, Nozzle shows it to you once. This is the only time the full token is visible. For security, we don't store it in a readable form, so we can't show it to you again later.

• Click Copy and paste the token somewhere safe, such as a password manager or your secrets store.
• If you lose the token, you can't recover it. You'll need to create a new one and update wherever the old one was used.
• Treat the token like a password. Anyone who has it can access your Nozzle data, so don't paste it into shared documents, tickets, or chat messages.

When you've saved the token, click Done. If you need more than one, click Create another to repeat the process.

About the dedicated user

Each token is owned by its own dedicated user, created automatically when you create the token. The confirmation screen shows that user's User ID. This is by design: it keeps API activity separate from your personal account, and it means automated access doesn't break if a person leaves the team or changes roles.

The token's user can read every project in the workspace. You never need to add it to a project, and there are no extra permissions to set. If a call with a working token returns a 404 or an empty result, the fix is in the request, usually an ID from the wrong workspace, not in the token user's access. See What do common API errors mean?

The dedicated user appears in your Users list alongside your team members, with an auto-generated email address (something like nozzle-api-user-20260625.nozzle@nozzle.app). Nozzle doesn't charge per user, so these token-owner accounts don't add to your bill.

To revoke a token, open its dedicated user from the Users list and click Remove User. Do this whenever a token is no longer needed or you suspect it has been exposed, then create a fresh token for anything that still needs access.

Use your token

Send the token in the Authorization header of your API requests, using the word Token followed by a space and then the token value:

Authorization: Token <your_api_token>

Note that this is Token, not Bearer. The API base URL is https://api.nozzle.app. For a full walkthrough of authenticating, finding your workspace and project IDs, and making your first call, see How do I authenticate with the Nozzle API?