# New projects now get safer API tokens by default

[date: 2026-11-09T13:33:18.221+01:00]

New projects now come with two tokens that can only read your content: one for published content and one that also includes drafts, for previews. Both use a new Read-only role, which you'll find in your Roles settings next to Admin and Editor.

If your project was created before this change, nothing changes for you: your existing tokens keep working as they do today.

**Why we're making this change**

API tokens are the keys your website uses to fetch content, and they often end up in places that aren't fully private. So the tokens a project starts with should do exactly what most websites need, and nothing more.

With a role behind them, you can always see what each token can do. If you need one that can do more, like creating or editing content, you can create it with the role you need.