### Heads up In September, we’ll reintroduce a rate limit for the authentication endpoint: 60 requests per minute for each client ID. To avoid reaching this limit, reuse access tokens until they expire instead of requesting a new token before every API call. To get started with our API, you need to set up authentication. You can try to follow our example and make a first call – just to see how it’s like to work with our API. If you want to access API for the first time, you need to generate your API credentials and use them to create an access token. The token is needed to authenticate API calls. Our API uses [client credentials](https://www.oauth.com/oauth2-servers/access-tokens/client-credentials/) (OAuth grant type) for obtaining a user token. ## Create API keys To create API keys, follow these steps: 1. Log in to **Piwik PRO**. 2. Go to **Menu > Profile (Click on your email)** . 3. Navigate to **API keys**. 4. Click **Create a key**. 5. Enter **Name** and click **OK**. 6. Copy **Client ID** and **Client secret**. The **Client secret** won't be available after you close this window. > **Note:** Credentials are valid until they are deleted in **API keys**. ## Create an access token To create an access token, follow these steps: 1. Piwik PRO API tokens use [JWT](https://jwt.io/) format. 2. Make a call: ```sh curl -X POST 'https:///auth/token' -H "Content-Type: application/json" --data '{ "grant_type": "client_credentials", "client_id": "", "client_secret": "" }' ``` > **Note:** Replace `` with your account URL, `` with your client ID, and `` with your client secret. 3. Response example: ```json {"token_type":"Bearer","expires_in":1800,"access_token":""} ``` 4. Now you can use `` to communicate with Piwik PRO API. The token is a Bearer type, so you need to include it within the header in every API call. ``` Authorization: Bearer ``` > **Note:** Every token is valid for 30 minutes. expires_in shows the expiration time in seconds. ## Delete API keys If you no longer want to use generated API credentials in access tokens, you need to delete them. To delete API credentials, follow these steps: 1. Log in to **Piwik PRO**. 2. Go to **Menu > Profile (Click on your email)**. 3. Navigate to **API keys**. 4. Choose credentials that you want to revoke and click **X**.