Personal API tokens, connected apps and activity

“API & AI connections” lives in Settings (avatar in the top right → Settings) and has four parts:

1. Connect your AI: the MCP URL (click Copy), setup links for each app, and today's usage.
2. Connected AI apps: Claude, ChatGPT, Cursor and other apps you connected by signing in.
3. Personal API tokens: for scripts, Shortcuts, or tools that can't sign in.
4. Activity: every change made by your AI apps and tokens, with undo.

Connected AI apps

Each app shows its name, the permissions you gave it, when it connected, when it was last used and today's calls. Click Disconnect and it loses access immediately (any short-lived tokens it holds stop working too). To use it again, connect from the AI app.

Reconnecting the same app replaces its old authorization, so it doesn't use an extra slot. Free accounts can connect up to 5 apps, Pro up to 20.

Personal API tokens

1. Under Personal API tokens, click New token.
2. Give it a name you'll recognize (like “Shortcuts”) and choose its access: Full access by default, or tick only what it needs.
3. Choose when it expires (30 days, 90 days, 1 year or never) and click Create.
4. Copy the token now (it starts with wsp_). It's shown only once. We store only a hash of it, so it can't be recovered; if you lose it, revoke it and create a new one.

The list shows each token's last 4 characters, permissions, last use, calls today and in total, and expiry. Click Revoke when you no longer need one; scripts using it stop working right away. Free accounts can have 3 active tokens, Pro 20.

To call the API with a token, see Open API.

Permissions

Permission	What it allows
Read	See your widgets, page, start pages, focus and My Data (always included)
Status	Update the “Now” status on your page and status widgets
Widgets	Create and edit widgets and countdowns
Personal page	Add cards to your personal page
Start pages	Add sites to your start pages
Focus	Add to-dos, check in habits, log focus time
My Data	Add records to your My Data tables

No permission can delete your data or change your account, payments or membership.

Activity and undo

Every change is logged: who made it (which app or token, or you when undoing), whether it came through MCP or the API, when, what changed and what it was before.

• Changes from the last 7 days have an Undo button. One click restores things: new widgets, cards, links or to-dos are removed, and edited statuses or widget settings go back to how they were.
• If the same item changed again later, undo the newer change first.
• An undo is logged too and can't itself be undone.
• You can also just ask your AI to “undo that last change”.

Limits

Limit	Free	Pro
Active tokens	3	20
Connected apps	5	20
Calls per day	100	300
Changes per day	30	100
Calls per minute	20	60

All your tokens and apps share your account's limits, which reset daily at midnight Beijing time (UTC+8). When the site is under heavy load, free accounts may temporarily get fewer changes per day.