What are API tokens and how do I create one?

API tokens, also called personal access tokens, let the Poll CLI, MCP server, or your own integration act within your account without using your normal interactive sign-in each time.

Go to Settings > Developer, choose 'New token', give it a name that identifies the device or integration, select the required permissions, and set an expiration. Use the smallest scope that can complete the job.

In particular, do not grant the sensitive Bet permission to a tool that only needs to read public bets or balances.

Copy the token when it is created because the full value is not shown again.

Poll tokens use the polld_ prefix, but the prefix is not a secret and does not prove that a value is safe.

Store the full token in a password manager, environment variable, or the secret storage recommended by your client.

Never paste it into chat, source control, screenshots, or support messages.

Revoke tokens you no longer use and replace any token that may have been exposed.

See the API authentication guide for scope and security details.