# Create a Trend Micro Vision One API Token
### **Obtain authentication tokens**
Generate authentication tokens in the Trend Vision One console to access the APIs.
1. On the Trend Micro Vision One console, go to **Administration** > **API Keys**.
2. Generate a new authentication token.
3. Click **Add API key**.
4. Specify the settings of the new API key**:**
1. **Name**: Enter a meaningful name that can help you identify the API key (Example: `RadiantSecurity_API_Token`).
2. **Role**: The user role assigned to the key. The assigned role must have the following permissions:
| API Category | App | Permissions |
| -------------------------- | -------------------------- | ------------------------ |
| Alerts / Workbench | Workbench | View, filter, and search |
| Observed Attack Techniques | Observed Attack Techniques | View, filter, and search |
| Search | Search | View, filter, and search |
3. **Expiration time**: The time the API key remains valid. By default, authentication tokens expire one year after creation. However, a master administrator can delete and regenerate tokens at any time.
1. **Status**: Provides information about whether the API key is enabled.
2. **Details**: Provides additional information about the API key.
5. Click **Add**.
6. Copy and store the authentication token in a secure location.
7. Log into your Radiant account and go to **Settings** > **Credentials** > **+ Add Credential**
8. Select the credential of type **Secrets Sharing Credential.**
9. Click **Configure credential.**
10. Give it a descriptive name, and add the token in the **Free text** field.
11. Click **Add Credential**.
