---
id: impersonation-token
title: Impersonation Token
hoverText: A GitLab token generated by Themelio to act on behalf of a user for API operations.
---

An Impersonation Token is a GitLab token generated by the Themelio backend to communicate with the GitLab API on behalf of a user. These tokens are created during the sign-in process, stored in Valkey keyed by session ID, and injected by middleware as a PRIVATE-TOKEN header into authenticated API requests. They are revoked and cleaned up upon sign-out.