# API tokens

> Tokens for the Python SDK, your own scripts, and tables' APIs.

An API token lets code use rho as you: the [Python SDK](/docs/guides/python-sdk/), your own scripts, and [table APIs](/docs/guides/table-apis/). Agents don't need one: they connect over MCP and sign in in the browser.

Make one on the **API tokens** page of the rho app. Give it a name, such as "nightly import": what it writes is signed with that name in the tables' history.

- A token starts with `rho_sk_`, and is shown once, when it's made. Copy it then: rho keeps only a hash.
- It can do anything you can in your workspace.
- Revoke it on the same page. It stops working at once.

Send it as a bearer token:

```bash
curl -H "Authorization: Bearer rho_sk_…" https://api.rho.store/v/<key>
```

The SDK reads it from `RHO_API_KEY`.

Keep tokens out of code and out of a browser. A web page that reads a table should read a [public table](/docs/concepts/sharing/), which needs no token.