# Token

The Token API is responsible for generating and managing query tokens, which are used to authenticate access to the GraphQL Query API. These tokens can be configured to restrict access to specific branches, source IP addresses, and publishing states.

 - [POST /api/token/v2](https://api-docs.sitecore.com/sai/token-api/token/createtoken.md): Creates a query token. The scope and permissions of the token are specified through the request TokenParameters object that includes a required label and expiration date and time (such as `"expiration
 - [GET /api/token/v2](https://api-docs.sitecore.com/sai/token-api/token/gettokens.md): Lists tokens for a specific tenant.
 - [GET /api/token/v2/{id}](https://api-docs.sitecore.com/sai/token-api/token/gettokenbyid.md): Retrieves a specific token using its ID.
 - [DELETE /api/token/v2/{id}](https://api-docs.sitecore.com/sai/token-api/token/deletetokenbyid.md): Deletes a specific token using its ID.
 - [PATCH /api/token/v2/{id}](https://api-docs.sitecore.com/sai/token-api/token/updatetokenbyid.md): Updates a specific token using its ID. When you update a token, you can omit properties that do not need to be updated. To remove a restriction, you can use null or an empty array. Changing the expira
 - [POST /api/token/v2/rotatekey](https://api-docs.sitecore.com/sai/token-api/token/rotatesigningkey.md): The signing key is used to digitally sign tokens and ensure their authenticity and integrity. Rotate the signing key to replace the current key with a new one that has updated security credentials. T