# Webflow setup for PopMCP

One Webflow site API token, generated under Site settings, Apps & integrations, API access, pasted into PopMCP's API token field.

- Auth: API credentials
- Setup time: 4 min
- API base URL: https://api.webflow.com/v2
- Credentials screen: https://webflow.com/dashboard
- Provider docs: https://developers.webflow.com/data/reference/token/authorized-by/list-authorized

## Before you begin

- A Webflow account with admin access to the site you are connecting, because only site admins can generate API tokens
- Fewer than 5 existing API tokens on the site, which is the per-site maximum
- An Ecommerce site plan if you want the product and order tools

## Get your credentials

### 1. Open Site settings for the site you want to connect

Sign in at webflow.com/dashboard and open the workspace that owns the site. Click the gear icon on the site's card to open Site settings.

Screen: https://webflow.com/dashboard

### 2. Open Apps & integrations and scroll to API access

In the Site settings sidebar click Apps & integrations. Scroll to the API access section at the bottom of the page.

### 3. Name the token and set a permission for each API

Click Generate API token, type `PopMCP` as the name, then set a permission level for every Webflow API. Set CMS, Sites, Pages and Assets to Read and write, set Forms to Read-only, set Ecommerce to Read and write if the site sells, and click Generate token.

### 4. Copy the token out of the dialog

Click Copy and paste the token somewhere safe, then click Done.

### 5. Paste the token into PopMCP

Open the Webflow connector in PopMCP, paste the value into API token, and save.

## Fields PopMCP asks for

- API token (apiToken) [required]: In Webflow: Site settings → Apps & integrations → API access → Generate API token. Choose the scopes you need (e.g. CMS read/write, e-commerce, pages, forms). Copy the token (shown once) and paste it here. A workspace/Data-Client token that can see multiple sites works too. Stored encrypted; used server-side only.

## Verify

PopMCP shows Webflow as Connected and can list the site's CMS collections. The token's Last used value under Site settings, Apps & integrations, API access updates to today.

## Troubleshooting

### 401 Unauthorized

Cause: The token was mistyped, truncated when copied, or revoked.

Fix: Generate a fresh token under Site settings, Apps & integrations, API access, then paste the whole string with no leading or trailing spaces.

### 403 Forbidden on one tool only

Cause: That API was left on No access when the token was created.

Fix: Webflow tokens cannot be re-scoped after creation. Revoke the token, generate a new one, and set the missing API to Read and write.

### Generate API token is unavailable

Cause: The site already holds 5 API tokens, which is the per-site maximum.

Fix: Revoke a token you no longer use in the API access list, then generate a new one.

### Ecommerce permissions are not offered

Cause: The site is not on an Ecommerce site plan.

Fix: Upgrade the site plan, or connect without the ecommerce tools.

### 429 Too Many Requests

Cause: You passed the per-minute limit for the site's plan.

Fix: Slow the request rate. Starter and Basic sites allow 60 requests per minute, and CMS, Business and Ecommerce sites allow 120. Site publish is capped at one successful publish per minute.

### A token that worked before now fails

Cause: Site API tokens expire after 365 consecutive days of inactivity.

Fix: Generate a replacement token and update it in PopMCP.

---

Source: https://www.docs.popmcp.com/docs/integrations/webflow/