> ## Documentation Index
> Fetch the complete documentation index at: https://docs.corsair.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Get Credentials

> Step-by-step instructions for obtaining Figma API credentials.

## Authentication Method

* **[`api_key`](/concepts/api-key)** - Personal access token

## Personal Access Token Setup

### Step 1: Create a Personal Access Token

1. Log in to [figma.com](https://www.figma.com)
2. Click your profile icon → **Settings**
3. Scroll to the **Personal access tokens** section
4. Click **Generate new token**
5. Give it a name (e.g., "Corsair Integration")
6. Copy the token immediately — you won't be able to see it again
7. Store it securely

**Storing Credentials:**

```bash theme={null}
pnpm corsair setup --plugin=figma api_key=your-personal-access-token
```

## Webhook Setup (Optional)

Figma webhooks use a passcode for verification (not an HMAC secret).

1. Use the Figma API or Corsair to create a webhook (`corsair.figma.api.webhooks.create`)
2. Provide a `passcode` in the webhook creation request
3. Store it as the `webhook_signature`:

```bash theme={null}
pnpm corsair setup --plugin=figma webhook_signature=your-webhook-passcode
```

## Required Credentials Summary

| Credential            | Required For         | Where to Find                           |
| --------------------- | -------------------- | --------------------------------------- |
| Personal Access Token | All API calls        | Figma Settings → Personal access tokens |
| Webhook Passcode      | Webhook verification | Set when creating the webhook           |

For general information about how Corsair handles authentication, see [Authentication](/concepts/auth).