How to get your Brex API token: Step-by-step guide
March 21, 2025
If you're building an integration with Brex, you'll need an API token from your customer's Brex account to authenticate requests.
This guide shows you (or your customers) how to generate one from Brex's account settings.
Generate a user token
- Sign in to dashboard.brex.com as an account admin or card admin .
- Go to Developer > Settings .
- Click Create Token .
- Create a name for your token that will help you identify it. Choose what level of data access you need for your application; these are the scopes your token will have.

- The next screen will confirm your previous selections. Make sure it looks good, then select Allow Access .

- Your token is now created. Copy and store the token securely. You won't be able to see it again.

- Back on the developer page of your Brex dashboard, you should see your token listed now. As a security measure, part of the string is obfuscated. If you lose it, create a new one and replace the token.

Caution: Your user token is private and should not be shared. Never check it into version control or save it somewhere publicly accessible. If your user token is compromised or leaked, make sure to revoke it.
Token revocation and expiration
User tokens will expire if they are not used to make an API call for 90 days.
If your token is compromised, or you no longer need it, revoke the user token from the developer page in your Brex dashboard. Once revoked, any calls made with this token will immediately begin to fail.
You've now created your Brex API token - just one of many if you support multiple vendors. Each one adds new auth flows, schema differences, and ongoing maintenance.
Unified.to removes that overhead with unified objects that work across 350 APIs. Map once, launch everywhere. Your team ships features instead of debugging vendor-specific edge cases.
Book a demo to see how much faster you can launch customer integrations with Unified.to.