> ## Documentation Index
> Fetch the complete documentation index at: https://docs.pushctl.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Application tokens

> Create, store, scope, rotate, and revoke Pushctl application tokens.

Application tokens are bearer credentials scoped to one application. Create them under **Application settings**.

## Choose a preset

| Preset      | Abilities                                                        | Use                                                             |
| ----------- | ---------------------------------------------------------------- | --------------------------------------------------------------- |
| Client      | `installations:write`, `installations:read`, `events:write`      | Android, iOS, and Capacitor apps                                |
| Server send | `notifications:send`, `notifications:read`, `installations:read` | Laravel and other trusted backends                              |
| Read only   | `installations:read`, `notifications:read`                       | Reporting and diagnostics                                       |
| Full access | All five abilities                                               | Trusted server integrations that genuinely need every operation |

<Warning>
  Never embed a **Server send** or **Full access** token in a mobile app. Anyone who extracts it could send notifications.
</Warning>

## Create and store a token

<Steps>
  <Step title="Name the integration">Use a name such as `Production iOS` or `Order service`.</Step>
  <Step title="Choose the narrowest preset">The preset determines the token's API abilities.</Step>
  <Step title="Copy the secret">Pushctl displays the token value only once. Store server tokens in a secret manager and client tokens in the app's build configuration.</Step>
</Steps>

## Rotate or revoke

Create a replacement, update the integration, verify it, then delete the old token. Deletion takes effect immediately. The token list shows its name, abilities, creation time, and last-used time, but never reveals the secret again.