Personal access tokens
A personal access token connects Claude Code, Cursor, Codex, VS Code or your own script to your FlareWarden account without a browser sign-in. It acts as you, in one account.
The MCP server is in beta. It works on every plan, and its tools and their answers may still change as we improve them. Send feedback or report a problem through the contact form or to support@flarewarden.com.
Create a token
- In FlareWarden, open your account, then Integrations and AI Agents & API.
- Under Personal access token, give the token a name of up to 60 characters, such as "Claude Code on my laptop".
- Choose its permissions:
- Read (always): See your sites, checks, incidents, reports, usage, status pages and your alert settings.
- Manage monitors: Add, change and pause monitors, within the daily budget below, and change which alert emails you get.
- Status pages: Create and edit status pages.
- Incidents & maintenance: Post incidents and schedule maintenance, after you approve the text.
- Team: Invite people, change roles, and add or test webhooks, after you approve each one.
- Choose when it expires: in 30 days, in 90 days or in a year. 90 days is preselected. Every token expires; none can last longer than a year.
- Choose Create token and copy the token. It is shown once: FlareWarden keeps only a fingerprint of it and cannot show it again.
Every member can create tokens for themselves, whatever their role, unless the account owner has turned AI agents off. A token never lets an agent do more than you can do on the website, whatever permissions it has.
Use it
Tokens start with fwp_. Send yours in
the Authorization header of every
request to the MCP server:
Authorization: Bearer fwp_…Connect an AI agent shows where Claude Code, Cursor and Codex take it. Keep a token out of files you commit: put it in an environment variable, as those examples do.
Daily monitor budget
A new token may add at most 25 monitors in any 24 hours, counted as your plan counts them. Change it, from 1 to 1000, in the token's row on the AI Agents & API page. Your plan's limit still applies.
See and revoke tokens
Your connections, on the same page, lists each of your tokens with its name, its last four characters, its permissions, when it was last used, when it expires and its daily budget, beside the apps you connected by signing in. Owners and admins also see every member's connections under Team members' connections, and can change their budgets and revoke them.
Revoke stops a token at once, everywhere. A token also stops working when:
- it reaches its expiry date;
- you reset your password, which revokes all your tokens and connected apps;
- you are removed from the account;
- the account owner turns AI agents off for the account.