Rotate the bearer token
2 min · 3 steps
If you suspect the token has leaked, rotate it. The prior token is immediately invalidated.
Bearer tokens are shown exactly once. Rotating mints a fresh token and surfaces it for you to copy; the prior token stops working immediately. Every external host using the old value will see 401 on its next call until you update its config. This is the right reaction if you committed the token to a shared config file by accident, switched machines, or share the install with a teammate.
Steps
- Open Settings → AI → MCP Server.
Same surface as the enable flow.
- Click Rotate token.
Confirm in the inline area that appears. Copy the new token. The Show/Hide eye lets you mask it for screen-sharing.
- Update every MCP host's config.
Anywhere the old token was pasted needs the new one. Claude Desktop / Cursor / VS Code restart picks up the change.
Live recipes need the desktop
This article is a static preview. The in-app Help sidecar inside Avery NXR can fire each step against your live project — install the desktop to use it interactively.