What is API token access?

Users can create API tokens to authenticate into an organization and to run scripts.

With an external user policy, admins can control whether external users can make API app calls with an API token to your organization’s apps. Available external user security policy settings

By default, your organization’s API token settings are set to allow access. You can change this to block external users from making API calls to your apps. This setting applies to all external users in the organization. Edit external user security settings

It can take up to 10 minutes to update your API token access setting when you change it. The setting applies the next time an external user tries to make an API call with a token to run a script into your organization.