Authentication

The Toggl 2.0 API authenticates requests using API keys.

API keys provide a simple, long-lived authentication method suitable for server-to-server integrations and scripts.

API keys use the Authorization header with a Bearer token:

curl -H "Authorization: Bearer toggl_sk_your_key_here" https://focus.toggl.com/api/users/me/settings

info

API keys are scoped to your user account and inherit your permissions across all organizations and workspaces you belong to.

You can create, view, and revoke API keys from your Toggl 2.0 settings. Store your key securely — it is only shown once.

Only one active key per user is allowed. Creating a new key automatically revokes any existing key.

ERROR

If authentication fails, HTTP status code 401 is returned.