🔌 API tokens
API tokens let you connect BolloPrint with external tools like Make (Integromat), Zapier, your own scripts, or any system that needs to read or write workshop data without a person being present.
They're available under Settings → Tokens for Admins and Owners.
What can an integration do with an API token?
Depending on the role you assign to the token, an integration can:
- Create orders automatically when a sale arrives from another platform.
- Read order status to update an external tracking system.
- Add customers in bulk from an import.
- Query inventory for stock alerts.
The token acts on behalf of a "system" user of the workshop, not a specific person.
Create an API token
- Go to Settings → Tokens.
- Click "+ New token".
- Fill in the form:
- Name: something descriptive so you know what it's for (e.g., "Make — web orders").
- Role: the token's access level (
admin,worker, orviewer). Use the minimum needed. - Expiration: how long the token will stay active (1 week, 1 month, 3 months, 1 year, or no expiration).
- Click Create.
:::warning 🔐 The token is shown only once Immediately after creating the token, the system displays the full key. Copy it right then — you can't view it again. If you lose it, you'll have to create a new token and revoke the old one.
:::
The token starts with bp_tat_
All workshop tokens start with the prefix bp_tat_ (BolloPrint Tenant API Token). It's easy to identify if you have several tokens in a password manager.
Token roles
| Role | What it can do |
|---|---|
admin | Full access (read and write across all modules). |
worker | Equivalent to a Worker: manages orders, customers, catalog. |
viewer | Read-only. Useful for integrations that only need to query data. |
Deactivate a token
If you no longer need a token but want to keep the history of what it did, use Deactivate. The token stops working but stays in the list.
If you want to remove it from the list entirely, use Delete (only available for tokens that are already deactivated or expired).
Usage audit
Every time an integration calls the API using a token, BolloPrint records the action in the change history of the modified object. Instead of a user's name, you'll see "API — [token name]" next to a robot icon 🤖.
Who can manage API tokens?
Only Admins and Owners can create, view, and revoke tokens. Workers and Read-only users don't have access to this section.