# Create Integration Token

Source: https://coolify.io/docs/api/endpoints/integration-tokens/create-secret-manager-integration-token

## POST /security/integration-tokens

Create Integration Token

Create and validate a Cloudflare, Doppler, Infisical, or Vault integration token. A Cloudflare token also gets its DNS zones; it is not stored when the zones cannot be read. Requires admin or owner.

**Authentication:** Bearer token (`bearerAuth`)

### Request body

`application/json`, required.

| Field | Type | Required | Description |
| --- | --- | --- | --- |
| provider | string enum "cloudflare", "doppler", "infisical", "vault" | yes |  |
| name | string | yes |  |
| token | string | yes |  |
| capabilities | array of string enum "dns", "tunnel", "secrets" | no | Cloudflare: dns, tunnel (tunnel needs dns). Default: dns. Secret managers: secrets. |
| automatic_dns | boolean | no | Cloudflare only. Create DNS records when a domain is added. Default: true. |
| proxied_dns | boolean | no | Cloudflare only. Create new records proxied (orange cloud). Default: false. |
| metadata | object | no | Secret managers only: base_url, client_id (Infisical), namespace (Vault), timeout. |

### Responses

#### 201

Integration token created.

`application/json`: object

| Field | Type | Required | Description |
| --- | --- | --- | --- |
| uuid | string | no |  |

#### 400

The provider rejected the token, or the Cloudflare zones could not be read.

#### 401

Unauthenticated.

`application/json`: object

| Field | Type | Required | Description |
| --- | --- | --- | --- |
| message | string | no |  |

#### 403

Not an admin or owner of the team.

#### 422

Validation error.

`application/json`: object

| Field | Type | Required | Description |
| --- | --- | --- | --- |
| message | string | no |  |
| errors | object | no |  |

#### 502

Coolify could not connect to the provider API.