# API Access

Click the API Access button to expand the “API ACCESS” modal. In this modal you can generate or refresh access tokens that can be used with Morpheus API and Morpheus CLI.

If no token yet exists for a particular “CLIENT ID”, click ACTIONS and then Generate. If a token has expired, we can also regenerate that token by clicking ACTIONS and then Regenerate. After regenerating a particular token, you would need to ensure any scripts using those tokens are updated.

If needed, Primary Tenant administrators may configure the expiration periods for existing clients or create new clients from HPE Morpheus Enterprise global settings (Administration > Settings > Clients). See [client configuration documentation](https://support.hpe.com/hpesc/public/api/document/sd00007510en_us/render?page=GUID-10BE13E9-1014-4162-97E7-A1056FED89B3.html) for more details.

- **morph-api:** Used for HPE Morpheus Enterprise API access and should be the default token-type used
- **morph-cli:** Used for HPE Morpheus Enterprise CLI access
- **morph-automation:** Used by the internal Task engine and by jRuby-type Tasks to make API calls. It shouldn’t be used externally for other types of access or in external automation. It is surfaced in the UI so users can see if a token exists and can clear it when necessary
- **morph-customer:** This token is available for legacy implementations and was previously recommended for custom API access (similar to the morph-api token). It’s not recommended for use but is still available to maintain support for legacy custom automation which may still be in use on customer sites

After navigating away from the User Settings page, the complete access and refresh tokens will be masked from view. If these are lost or compromised, you can eliminate a token completely by clicking ACTIONS and then Clear. If you need to generate a new token for the same Client ID, click ACTIONS and then Regenerate.

![../../_images/user-tokens.png](https://support.hpe.com/hpesc/public/api/document/sd00007510en_us/GUID-274AD26D-C940-4740-BBC7-7970107CCB4B-high.png)

NOTE

Access Tokens are only displayed/available after generation. Copy new Tokens and store appropriately before navigating from `/user-settings`, they will not be displayed again.
