# The REST API v2 is public

The REST API v2 opens with personal API tokens, and administrators can switch the REST API and MCP off.

## REST API

- **New:** The REST API v2 is public. See [Getting started](https://developers.plnnrly.com/en/docs/api/v2/guides/getting-started/).
- **New:** You create personal API tokens under **API access** in the user menu. Each token gets **Read**, **Write** or **Delete**, can be limited to certain parts of plnnrly, lasts at most 12 months, and can be rolled or revoked at any time. See [API tokens](https://developers.plnnrly.com/en/docs/api/v2/guides/tokens/).
- **New:** The **Manage API tokens** permission decides who may create tokens.
- **New:** An administrator can switch the REST API off under **Settings › Administration › MCP & API**. It was on by default.

## MCP

- **New:** An administrator can switch MCP off under **Settings › Administration › MCP & API**. It was on by default in this release; [v2.7.2](https://developers.plnnrly.com/en/docs/changelog/v2-7-2/) changed that for new organisations.