verapli
Sign inJoin free
Menu

Guides · database · Popular APIs

Airtable Web API (personal access token or OAuth integration)

Create a scoped personal access token for your own bases, or register an OAuth integration (needs privacy policy and terms URLs before others can authorise it).

Researched · not yet run liveLast researched 25 October 2026 · Airtable · provider site

Researched, not yet run live. Built from the provider’s official pages (linked below). A person hasn’t walked this flow end to end yet, so check each step against the source.
Do this with verapliJSON for agents

Who owns what

Tokens and OAuth integrations belong to an Airtable user account and act within that user's base permissions.

  • Airtable account personal owned by the person

Have ready

  • Privacy policy URL (required before sharing an OAuth integration) [2]Needed for: Add privacy policy, terms and client secret
  • Terms of service URL (required before sharing an OAuth integration) [2]Needed for: Add privacy policy, terms and client secret

Steps

Steps marked “human step” are ones only you can do: verapli never signs in, submits, pays or accepts terms for you.

  1. Create a personal access token

    At airtable.com/create/tokens click Create new token, name it, choose scopes, add the bases or workspaces it may access, then create.

    • verapli co-pilot
    • Human step: You press submit

    Where: https://airtable.com/create/tokens

  2. Copy the token

    The token is shown only once; copy it straight into your env file.

    • verapli co-pilot
    • After: Create a personal access token

    verapli captures AIRTABLE_API_TOKEN here by plain code: encrypted in your browser, never shown to AI.

    Where: https://airtable.com/create/tokens

  3. Register an OAuth integration (multi-user apps)optional

    At airtable.com/create/oauth click Register new OAuth integration, enter name and redirect URL, then add scopes.

    • verapli co-pilot
    • Human step: You press submit

    Where: https://airtable.com/create/oauth

  4. Add privacy policy, terms and client secretoptional

    Add privacy policy and terms of service URLs (needed before others can authorise), optional support email/logo; generate a client secret if token requests come from a server.

    • verapli co-pilot
    • Human step: You press submit
    • After: Register an OAuth integration (multi-user apps)

    verapli captures AIRTABLE_OAUTH_CLIENT_SECRET here by plain code: encrypted in your browser, never shown to AI.

    If something goes wrong (1)
    • Existing OAuth authorisations start failing after generating a client secret: Send the client secret in token requests; Airtable warns generating one can break requests until you do. [2]

    Where: https://airtable.com/create/oauth

Terms and gotchas

Plain-English summary, not legal advice. Each card links its source.

Worth knowingThe rules say

Rate limit is 5 requests per second per base (429 then about 30 seconds back-off). [3]

What you end up with

Env varSecretFormatWhat it is
AIRTABLE_API_TOKENsecretopaque, variable-length token stringPersonal access token
AIRTABLE_OAUTH_CLIENT_IDnot secretopaque id stringOAuth integration client ID
AIRTABLE_OAUTH_CLIENT_SECRETsecretopaque secret stringOAuth integration client secret

Pricing

  • Airtable says limits may become tiered by pricing plan; no specific plan figures on the rate limits page [to verify].

Source [3]

For agents

The same entry as JSON: /api/v1/entries/airtable/api · requirements /api/v1/requirements/airtable/api · terms /api/v1/terms/airtable/api.

Remote MCP (read-only, no auth)
claude mcp add --transport http verapli https://verapli.com/mcp

> "What do I need for Airtable Web API (personal access token or OAuth integration), and how long will it take?"
  → tools/call requirements { "provider_id": "airtable/api" }

Sources

  1. Personal access tokens Create at airtable.com/create/tokens with a name, scopes and base/workspace access; token shown only once; tokens are prefixed with their ID and should be treated as opaque variable-length strings. · accessed 25 October 2026 · official
  2. OAuth integrations Register at airtable.com/create/oauth with name and redirect URL; add at least one scope; privacy policy and terms URLs required before other users can authorise; optional support email, tagline, homepage, logo; optional client secret (shown once, regenerable, may break existing requests). · accessed 25 October 2026 · official
  3. Rate Limits 5 requests/second per base; 50 requests/second per user for PATs and service accounts; 429 then wait about 30 seconds. · accessed 25 October 2026 · official

Provider rules change. This page is generated from verapli registry version 2026.1025.387; spotted something out of date? Tell us. Airtable is not affiliated with verapli.