# Create a Hetzner API token

> To connect Hetzner, InfraNest needs an API token from your Hetzner project. The same token covers your cloud resources and your DNS zones.

Source: https://infranest.io/docs/create-a-hetzner-api-key
Last updated: 2026-08-30

---

Learn how to generate the API token InfraNest needs to connect to your Hetzner project — for anyone setting up Hetzner as a provider.

## Overview

- InfraNest uses a single API token to manage both your Hetzner cloud resources and your DNS zones.
- You'll create this token from your Hetzner project, then paste it into InfraNest in a separate step.

## Create the token

1. Sign in to the Hetzner Cloud Console.
2. Open your project, then go to Security → API Tokens.

   <!-- manual-screenshot: create-a-hetzner-api-key-1 — taken by hand in the Hetzner Cloud console; the capture rig cannot reach it -->
3. Select Generate API Token, give it a name (like "InfraNest"), and choose Read & Write.

   <!-- manual-screenshot: create-a-hetzner-api-key-2 — taken by hand in the Hetzner Cloud console; the capture rig cannot reach it -->
4. Copy the token now — Hetzner shows it only once.

> [!WARNING]
> Choose Read & Write, not Read. A read-only token can see your resources but can't manage them.

## Next step

Go back to InfraNest and follow **Connect Hetzner** to paste the token.