Navigate to Dashboard > Settings > API Tokens to create a new token.

Tokens use the lsk_ prefix followed by 64 hexadecimal characters (256 bits of entropy). The full token is displayed only once at creation time — the server stores a SHA-256 hash only.

Each user can create up to 25 API tokens.

Pass a token directly to the CLI for headless authentication:

$ localskills login --token lsk_your_token_here

This is useful for CI/CD pipelines, automated publishing workflows, Docker containers, and remote servers where browser-based login is not available.

Revoke any token from the Settings page. Revoked tokens are immediately invalidated and cannot be used for further API requests.

Each token displays a “last used” timestamp so you can identify stale or unused tokens before revoking.