Rotate or revoke the token
#Rotate token and Revoke source are in the menu next to the token in Setup. Rotate the token if it was exposed or lost; Setup can't show it again.
Rotate token issues a new token. The token it replaces keeps working for 24 hours so you can update every method that uses it; the confirmation lists the methods that delivered in the last 7 days. Rotating again within those 24 hours stops that earlier token at once. To stop every token immediately, revoke the source. Retained requests stay until they expire.
If the project domain changes, revoke the old domain-bound source and generate a new token before sending requests for the new host.
Manage sources with the API
#Create, rotate and revoke crawler sources from your own code with createCrawlerSource, rotateCrawlerSource and revokeCrawlerSource. Each needs the write and integrations permissions.