---
title: "Personal Access Tokens"
description: "Personal Access Tokens sign your scripts and API calls in to TIR, so your account password stays out of them."
content_type: "overview"
product: "personal-access-tokens"
platform: "TIR"
url: "/tir/personal-access-tokens/"
---

# Personal Access Tokens

TIR uses two kinds of credential to protect your resources. **Personal Access Tokens** sign in your
applications, scripts, and services to the TIR API, so only the clients you give a token to can use it.
SSH keys, the other kind, let you connect to your instances and training clusters over an encrypted
connection; see [SSH Key Management](/tir/ssh-keys/).

## Where to find them

**Personal Access Tokens** is in a project's side menu, under **PLATFORM SERVICES**. You see the
tokens you created in that project.

## What you can do

- [Create a token](/tir/personal-access-tokens/how-to/create-a-personal-access-token/) with a name you choose.
- [Copy a token or download its config file](/tir/personal-access-tokens/how-to/copy-a-token-or-download-its-config-file/)
  when a script needs it.
- [Use a token in API calls](/tir/personal-access-tokens/how-to/use-a-token-in-api-calls/) from a command line, a
  script, or a CI/CD pipeline.
- [Delete a token](/tir/personal-access-tokens/how-to/delete-a-personal-access-token/) you are done with.

[How Personal Access Tokens work](/tir/personal-access-tokens/concepts/how-personal-access-tokens-work/)
explains what a token can reach, how long it lasts, and how to keep it safe.

## Where to start

Start with [Get started with Personal Access Tokens](/tir/personal-access-tokens/get-started/), which
creates your first token. For help with a message, see
[Troubleshooting Personal Access Tokens](/tir/personal-access-tokens/troubleshooting/personal-access-tokens/),
and for short answers, the [FAQ](/tir/personal-access-tokens/faq/).