Docs

Type to search every page.

AI assistants

API tokens and connected apps

Make and revoke API tokens for AI assistants, and see or disconnect the apps you've let sign in to Budget Smugglers.

Everything about AI connections lives under Settings › Connections. It shows the server URL, your API tokens, and the apps you’ve allowed to sign in.

API tokens#

A token lets an assistant or script connect without signing in through the browser. Most assistants can sign in, so you only need one when they can’t.

Make a token#

  1. Open Settings › Connections.
  2. Under API tokens, give the token a Name, like “Claude Code” or “Laptop”.
  3. Pick the Access: Read only or Read and change.
  4. Pick when it Expires: in 30 days, in 90 days, in a year, or never.
  5. Choose Create token.
  6. Copy the token straight away. It won’t be shown again.

Tokens start with bsm_. After you close the box, the app only keeps the first few characters, so you can tell your tokens apart.

The box also shows a ready-made Claude Code command with your token in it. For other clients, see the client pages.

You’re emailed whenever a new token is made, with a link back to Settings › Connections. If it wasn’t you, revoke it there.

What a token can do#

A token only works for AI connections. It can’t sign in to the app, and it can’t be used anywhere else. Your role in each pool still applies, the same as when you use the app.

Import statements tokens#

The Access list also has Import statements. Those tokens are for the Sync extension. They can only push statements in. They can’t read your budget, and they don’t work with AI assistants.

Revoke a token#

The token list shows each token’s name, access, when it was last used and when it expires. Choose the bin icon next to a token, then Revoke. Anything using it loses access straight away.

Connected apps#

Connected apps lists the apps you’ve allowed to sign in, such as Claude or ChatGPT. Each shows the access you gave it and when you allowed it.

You’re emailed whenever you allow an app.

Disconnect an app#

Choose Disconnect next to the app, then Disconnect again to confirm. It loses access straight away. To get back in, it has to ask you again, and you’ll see the consent screen.

To change an app from read only to read and change, or back, disconnect it and connect again. You choose the access on the consent screen.