Managing connection tokens
A connection token is a secret value that agents such as Claude Code and Codex use to prove themselves to the Clone-Me server. It starts with cm_live_.
- The console shows the token only once, right after it is issued, and does not save it. The server keeps only a hash, not the token itself.
- A lost token cannot be shown again. Issue a new one.
- The Claude app connection does not use a connection token. Claude's access pass is renewed automatically every hour, so the expiry and reissue steps on this page do not apply to it.
Where the token is saved
The console's setup command saves the token only in the agent's user config file on your computer.
| Agent | File |
|---|---|
| Claude Code | ~/.claude.json |
| Codex | ~/.codex/.env (the server address is in ~/.codex/config.toml) |
Expiry
- The default is 90 days and the maximum is 1 year. When you issue a token, choose 30, 90, 180 or 365 days under Advanced: token purposes and expiry.
- Clone-Me sends an email 14 days and 3 days before expiry (notifications are in preparation).
- The server refuses an expired token. The connection stays, so you only need to issue a new token.
- In the connection list, a connection whose token expires within 14 days shows "Expiring soon".
Reissue without a break
Issue a new token
Under Connections in the console, open the connection and select Reissue for the token to replace. A new token with the same purposes is issued and shown once.
Run the same setup command again
On the computer where you use the agent, run the same setup command as the first time. When the command asks whether to replace the token, press
yand paste the new token. The command is also under Show setup steps on the connection details page.Start the agent again and check that it works
For Claude Code, look for
Status: ✓ Connected. For Codex, start it again and check the status with/mcp.Revoke the old token
Select Revoke old token on the issue screen. The server refuses the old token at once.
A connection can have up to 5 active tokens. If you reach the limit, revoke a token you do not use first.
Revoke
| What | Where | Result |
|---|---|---|
| One token | Token list on the connection details page → Revoke | Only that token stops working at once. The connection and its other tokens stay |
| One connection | Connection details → Revoke connection | The connection and all its tokens stop working at once. You cannot undo this. To use the same computer again, make a new connection |
| All connections | Under the connection list → Disconnect all connections | All active connections and tokens are revoked at once. The Claude app connection is disconnected too |
If you think a token leaked
Last updated Oct 28, 2026