Personal access tokens allow you to grant access to your data through the Figma API. Some third-party integrations and plugins require a personal access token so that they can be authorized to access your data within Figma.

A personal access token can only be used for a single integration. You must generate a new personal access token for every integration you configure.

Generate a personal access token

1. From the file browser, click the account menu in the top-left corner and select Settings.
2. Select the Security tab.
3. Scroll to the Personal access tokens section, then click Generate new token.
4. Enter a name for your new token, assign the scopes you want, and press Return / Enter. For a complete list of the scopes you can assign to your personal access token, see the developer documentation.
5. Copy the token that is generated

Revoke a personal access token

If you no longer want to use a third-party integration, you can block access to your data by revoking the personal access token.

1. From the file browser, click the account menu in the top-left corner and select Settings.
2. Select the Security tab.
3. Scroll to the Personal access tokens section.
4. From the list of personal access tokens, select the token you want to revoke.
5. Click Revoke access.

The integration will no longer be able to access your data via the API. If you want to use the integration again in the future, you will need to generate another personal access token and reconfigure the integration.