---
schema: rendered-html/v1
title: "Manage Permanent Tokens | Developer Portal for YouTrack and Hub Documentation"
source_url: https://www.jetbrains.com/help/youtrack/devportal/Manage-Permanent-Token.html
generated_at: 2026-06-11T14:43:35.668705+00:00
---

Feedback

Thanks for your feedback!

Was this page helpful?

YesNo

Developer Portal for YouTrack and Hub

- Developer Portal
- Apps
- MCP Tools
- YouTrack Workflows
- YouTrack Import Scripts
- YouTrack Form API
- YouTrack REST API
- Get Started with REST API
- Log in to YouTrack
- Permanent Token Authorization
- [Manage Permanent Tokens](Manage-Permanent-Token.html)
- OAuth 2.0 Authorization
- REST API URL and Endpoints
- OpenAPI Specification (OAS)
- Fields Syntax
- Query Syntax
- Request Headers
- Custom Fields in REST API
- Pagination
- Users, Groups, and Access Management
- Hub REST API Endpoints Deprecated in YouTrack 2026.1
- Postman Collection for the YouTrack REST API
- REST API Reference
- REST API Use Cases
- REST API Troubleshooting
- Color Indices List
- Hub REST API

1. YouTrack REST API
2. Get Started with REST API
3. Log in to YouTrack
4. [Manage Permanent Tokens](#0)

# Manage Permanent Tokens﻿

Last modified: 07 May 2026

In Developer Portal for YouTrack and Hub, permanent tokens let developers access and perform operations securely using the REST API calls in their scripts and applications without having to implement OAuth 2.0 authentication flows. A permanent token allows access to a service with the permissions that are granted to the user account.

This page covers operations with permanent tokens that are performed in the user profile. For a sample of REST API calls using the permanent token, refer to the Permanent Token Authorization.

> ### note
>
> External Hub Accounts
>
> These instructions are only relevant for installations that use a built-in Hub service. When YouTrack is connected to an external Hub, these settings are managed in your Hub profile.
>
> To learn how to manage permanent tokens in Hub, refer to the Hub documentation.

## Create a Permanent Token﻿

To access a service programmatically with the permissions that are granted to your user account, create your own permanent token.

In addition to the permissions that are listed here, you need permission to read the service that you want to access with the token. Access to connected services is managed in Hub. If you work with YouTrack Cloud or a YouTrack Server installation that uses the built-in Hub service, all users have access to YouTrack services.

If your YouTrack Server installation uses an external Hub service, permission to read the connected service is granted in two ways:

- The Access setting for the service grants group members access to the application from the Services menu. If you are a member of a group that is granted access in this way, you can create a permanent token to access the service. Basically, if you can see the name and icon for the service in the Services menu, you can generate a token to access the service.
- You are granted the global Read Service permission.

If you are logged in and you don't see the option to create a token, ask an administrator to grant the Read Service permission to your account or to add you to a group for whom the service is visible.

### To generate a new permanent token:﻿

> ### tip
>
> Requires permissions: Update Self

1. Click your avatar in the application header and select Profile from the menu.
2. Switch to the Account Security tab.
3. Click the New token button.
4. In the New Permanent Token dialog, specify a name for the new token and the access scope for it. The scope for the token is a list of services which you can access with this new token.

   [![New permanent token dialog](https://crawler.prototype.prolicht.digital/l/XZmbiY)](https://resources.jetbrains.com/help/img/youtrack/new-permanent-token-dialog.png)

   YouTrack installations that use a built-in Hub service have separate scopes for YouTrack and YouTrack Administration.

   - The YouTrack scope grants permission to work with issues, tags, commands, agile boards, dashboards, reports, and other basic operations in YouTrack.
   - The YouTrack Administration scope grants permission to work with projects, manage user access, and update server settings.

   These scopes also give you the ability to send REST API calls to the following endpoints:

   YouTrack Cloud

   YouTrack Server

   | Scope | URLs | Description |
   | --- | --- | --- |
   | YouTrack | `/youtrack/rest/...`  `/youtrack/api/...` | Send API requests to the end-user part of YouTrack: issues, tags, commands, agile board, dashboard and reports. |
   | YouTrack Administration | `/hub/api/...`  `/hub/rest/...` | Send API requests to the administration part of YouTrack: project and access management, server settings, and so on. |

   | Scope | URLs | Description |
   | --- | --- | --- |
   | YouTrack | `/rest/...`  `/api/...` | Send API requests to the end-user part of YouTrack: issues, tags, commands, agile board, dashboard and reports. |
   | YouTrack Administration | `/hub/api/...`  `/hub/rest/...` | Send API requests to the administration part of YouTrack: project and access management, server settings, and so on. |
5. Click the Create token button.

   - A dialog window with the new token is displayed.[![Permanent token created](https://crawler.prototype.prolicht.digital/l/Sxwtie)](https://resources.jetbrains.com/help/img/youtrack/permanent-token-created.png)
6. Use either of these two actions to copy the token:

   - Click the Copy token button.
   - Select the token with your pointer and use the standard keyboard shortcut for your operating system to copy the current selection to the clipboard.
   > ### warning
   >
   > You must copy the token at this point. As soon as you close the dialog, you can't access the token again. If you close the dialog accidentally, the only way to obtain a token is to repeat the procedure and create a new one.
7. After you copy the token, close the dialog.

   - The new token is associated with your user account and is displayed in the Permanent Tokens list.[![Permanent token list](https://crawler.prototype.prolicht.digital/l/jpg2JW)](https://resources.jetbrains.com/help/img/youtrack/permanent-token-list.png)

## Delete a Permanent Token﻿

A permanent token does not have an expiration date. If you suspect that an authenticated service has been compromised, you can explicitly delete this token in your profile.

> ### tip
>
> Requires permissions: Update Self

### To delete a permanent token:﻿

1. Click your avatar in the application header and select Profile from the menu.
2. Switch to the Account Security tab.
3. In the list of tokens, select the token that you want to revoke.
4. Click the Delete button.

   - A confirmation dialog is displayed.
5. Click the Delete button to confirm the action.

   [![Delete token confirm](https://crawler.prototype.prolicht.digital/l/txd2c0)](https://resources.jetbrains.com/help/img/youtrack/delete-token-confirm.png)
   - The selected permanent token is deleted and removed from the list.

- [Manage Permanent Tokens](/help/youtrack/devportal/Manage-Permanent-Token.html)
- [Create a Permanent Token](/help/youtrack/devportal/Manage-Permanent-Token.html#obtain-permanent-token)
- [Delete a Permanent Token](/help/youtrack/devportal/Manage-Permanent-Token.html#delete-permanent-token)

Permanent Token AuthorizationOAuth 2.0 Authorization

- Privacy & Security
- Terms Of Use
- Trademarks
- Legal

Copyright © 2000–2026 JetBrains s.r.o.
