Webflow site tokens

Connect one Webflow site with a site API token. Choose its scopes in the site settings, then add the token to Sim.

Prerequisites

In Sim, you need workspace write access and permission to manage integrations.

Only site administrators can generate site tokens. Each site allows a maximum of 5 tokens — if you're at the cap, revoke an unused one before creating a token for Sim.

Setting up the site token

1. 1

   Open your site's Site settings and go to Apps & integrations → API access

2. 2

   Click Generate API token and give it a recognizable name (e.g. sim-workflows)

3. 3

   Select the scopes the token needs. The minimum set for Sim's Webflow blocks is:

   Sites: Read-only
   CMS: Read and write
   

   The picker offers no access, read-only, or read and write per category. Sites: Read-only (sites:read) is required for Sim to verify the token when you connect it. CMS: Read and write (cms:read + cms:write) covers Sim's Webflow tools — listing, getting, creating, updating, and deleting CMS items. Add other scopes only if you need them

4. 4

   Copy the token when it's shown. Webflow only displays it once — if you close the dialog, you'll have to generate a new token.

Adding the site token to Sim

1. 1

   Open Integrations from your workspace sidebar

2. 2

   Search for "Webflow" and open it, then click Add to Sim and choose Add site token

3. 3

   Paste the site API token and optionally set a display name and description

4. 4

   Click Add site token. Sim verifies the token by listing the sites it can access — if it fails, you'll see a specific error explaining what went wrong. A token created without the sites:read scope fails this check even if its CMS scopes are correct.

The token is encrypted before being stored, along with the site it grants access to.

Using the credential in workflows

Add a Webflow block to your workflow. In the credential dropdown, select the saved Webflow site token. Choose the operation and configure its inputs. The block calls Webflow's Data API (api.webflow.com/v2/...) using the token. It can only reach collections and items belonging to the token's site — pointing a block at a different site's collection fails with an access error.

Verify access and rotate the token

Read an item from the token's site, then test any required CMS writes. A token cannot access another site's collections. Use separate site tokens for multiple sites, or use OAuth when appropriate.

Scopes are fixed when the token is created. If you need wider access, generate a replacement with the required scopes, update the saved credential in Sim, test the workflow, then revoke the old token. Keep the five-token limit in mind. A missing scope can produce an authorization error even when the token is valid.

See Webflow's site-token guide for scope selection, inactivity expiration, and revocation.