monday.com API Tokens

Connect monday.com with a personal API token. It acts as the user who generated it, with that user's board access. Use a dedicated integration user if the workflows should have a separate identity.

Prerequisites

Admins and members can generate their own API token (guests and viewers cannot) — for production use, create a dedicated integration-user seat first. A token generated from a personal account stops working if that person is deactivated.

The token's user must be active, not view-only (Viewer), and have a confirmed email address. Tokens from view-only or unconfirmed users are rejected by the monday.com API with a 403 error even though the token itself is valid.

Setting Up the Token

1. Create a Dedicated Integration User (Recommended)

Have a monday.com admin invite a new member with a shared email like sim-bot@yourcompany.com and confirm the email address

Add the integration user to every board your workflows will read or write. The token mirrors the user's board access exactly — a board the user can't see is a board the token can't touch

2. Generate the Personal API Token

In the Developer Center, open the API token tab and click Show to reveal the token

Copy the token exactly as shown — monday.com doesn't document a fixed token format

monday.com issues one API token per user. Regenerating it immediately invalidates the old token — every integration using it breaks at once, with no overlap window. Don't regenerate the token to "get a fresh copy"; reveal and copy the existing one instead.

There is no scope picker: personal API tokens carry all API permission scopes automatically. What limits the token is the user's own access — board membership, item visibility, and account permissions.

Adding the API Token to Sim

Open Integrations from your workspace sidebar

Search for "Monday" and open it, then click Add to Sim and choose Add API token

Paste the API token and optionally set a display name and description

Click Add API token. Sim verifies the token by querying monday.com's me endpoint — if it fails, you'll see a specific error explaining what went wrong.

The token is encrypted before being stored.

Using the Credential in Workflows

Add a monday.com block to your workflow. In the credential dropdown, select the saved monday.com API token. Select it and configure the block as you normally would.

The block calls monday.com's single global API endpoint (api.monday.com/v2) using the token — there's no per-tenant domain to configure. The token acts as the user it was created by, with that user's board access.

Common Questions

No. Personal API tokens carry all permission scopes automatically. Access is limited only by what the token's user can see and do in monday.com — board membership is your permission model.

The token is bound to a user, and monday.com has no org-level token. If the token comes from an employee's personal account, it dies when that person is deactivated during offboarding. A dedicated seat like sim-bot@yourcompany.com survives team changes and makes the bot's activity auditable.

Carefully. monday.com allows only one token per user, and regenerating immediately kills the old one — there's no dual-token window. Regenerate in monday.com, then update the credential in Sim right away. Expect a brief outage for any workflows that run in between.

The token mirrors its user's board access. Add the integration user to the board in monday.com (with edit rights if the workflow writes), and the failing block will start working — no token change needed.

monday.com doesn't expire personal tokens on a schedule — they last until regenerated or until the user is deactivated. There's no official non-expiry guarantee, so treat a sudden 401 as a signal the token was regenerated or the user was deactivated.