Typeform API Token

Bridgecrew Policy ID: BC_GIT_70
Chekov Check ID: CKV_SECRET_70
Severity: LOW

Typeform API Token


To use the Typeform Create, Responses, and Webhooks APIs, you need to pass your personal access token in the Authorization header of your requests.

Access tokens are long strings of random characters that look something like this: tfp_943af478d3ff3d4d760020c11af102b79c440513. The access token is unique per developer. It is used to identify a given user and make sure that only you can access your typeforms and results.

Fix - Buildtime


  1. Log in to your account at Typeform.
  2. In the upper-left corner, in the drop-down menu next to your username, click Account.
  3. In the left menu, click Personal tokens or here.
  4. Identify the token you want to delete.
  5. Click ..., the three dots button in the right-side of the list.
  6. Click Delete this token.