To use any of Mapbox’s tools, APIs, or SDKs, you’ll need a Mapbox access token. Mapbox uses access tokens to associate requests to API resources with your account. You can find all of your access tokens, create new ones, or delete existing ones on your API Access Tokens page.
Every access token has permissions to make certain types of requests to Mapbox APIs – these are called scopes. When creating an access token, you will have the option to add additional public or private scopes to your token. If you choose to add secret scopes to your token, you will only have the chance to view the actual token itself once.
When choosing scopes, consider what you plan to do with the token. For example, if you are creating a token to upload data to Mapbox with the Mapbox Uploads API, you will want to make sure you select the uploads:write and uploads:read scopes.