Taskade provides two authentication methods to protect your API interactions.
Overview
Personal Access Tokens are unique strings that authorize access to the Taskade API. Use them when a full OAuth 2.0 flow is not necessary.
Get and Use a Personal Access Token
- Generate a Token:
- Go to https://www.taskade.com/settings/api.
- Scroll to Personal access tokens.
- Click Create token, give the token a name, and click Create.
- Copy the token. Taskade shows it only once.
- Use the Token in API Requests:
Include the token in the
Authorizationheader of each API request:MakefileAuthorization: Bearer YOUR_PERSONAL_ACCESS_TOKEN
- Protect the Token: Treat personal access tokens like passwords. Anyone with the token can access the API on your behalf.
- If you think that a token is compromised, revoke it and create a new token immediately.
Limits
- A token starts with the prefix
tskdp_. Taskade shows the value once, at creation. - Your account email must be verified before you can create a token.
- You can hold 5 tokens per account. Taskade refuses a sixth with the message
Cannot create more than 5 personal access tokens. - A personal access token carries no scopes. It grants everything the owning account can reach.
The same token authenticates REST API v1, Action API v2, the local @taskade/mcp-server, and the hosted MCP endpoint. See Authentication.