Generating a personal token

To create a temporary personal token, use the authorization link below to be redirected to the Daylite login page. After logging in, you'll be prompted to authorize API access to your account. Upon successful authorization, you'll receive both an access_token and a refresh_token.

Authorize API Access →

Upon successful authorization, you will receive a response similar to the following:

{
  "access_token": "xQ7LkP2vNfZr9sUwCj5H8mTByaE6DG",
  "expires_in": 3600,
  "token_type": "Bearer",
  "scope": "daylite:read daylite:write",
  "refresh_token": "Zx4Qm8LpT2vR6aYfC9nJ5eU3Hk7sDw"
}

⚠️
Important: Store both your access_token and refresh_token in a secure location immediately. This is the only time these values will be displayed — they cannot be retrieved again. If you lose your refresh_token, you will need to re-authorize to generate a new one.

Note: Access tokens expire after 1 hour. For information on refreshing your token, see Refreshing a Personal Token.

Personal tokens vs. OAuth applications

If you're considering applying for an OAuth app registration, it's worth understanding the difference. Both OAuth apps and personal tokens work the same way, access tokens expire after 1 hour and must be refreshed using a refresh token. An OAuth app registration does not bypass token expiration.

Use a Personal Token if you're:

Accessing your own Daylite account via the API
Writing a script or personal automation for your own use
Wiring up an AI assistant to your own Daylite database
Building a one-off internal integration for yourself or your team

Use an OAuth App Registration if you're:

Building an integration that other Daylite users outside of your own database will authorize through your app
Shipping a commercial or publicly distributed Daylite integration
Publishing to a marketplace or directory

Note: Tools like Zapier and Make already have a native Daylite OAuth integration built in, no personal token or app registration needed. Simply connect Daylite directly through those platforms.

Revoking a personal token

To revoke an access_token or refresh_token, visit the Integrations page in your Daylite account panel. Under Authorized Apps, you'll see a list of your authorized tokens and can manage or revoke them as needed.