Token Inventory is where you manage the connection between Spikerz and each of your connected social media accounts.

Spikerz protects an account through an API token - the authorization the social platform grants when the account is first connected. While that token is valid, Spikerz can monitor the account around the clock. If the token is revoked or expires, the account becomes disconnected: the account and its history stay in your workspace, but monitoring and automated protection stop until it is reconnected.

The Token Inventory actions live on the All Accounts page. Each account card carries a kebab menu - the three-dot icon in the top-right corner of the card - with the actions needed to keep tokens healthy across an asset's lifetime:

This guide covers each of those actions, and what to do when an account disconnects on its own.

Make sure that:

For more on workspace roles, see How to add admins and members to your workspace.

Revoke a token when you want Spikerz to stop monitoring an account without deleting it - for example while an asset is being handed to another team, during an internal review, or before you move the connection to a different platform user.

Revoking is reversible. The account, its alerts, and its history stay in the workspace, and you can reconnect it at any time.

On the All Accounts page, locate the account card and select the three-dot menu icon in the top-right corner of the card.

In the dropdown, select Revoke token. This option appears only for admins, and only while the account is currently connected.

A confirmation dialog appears:

"Revoking this token will disconnect the account and stop all monitoring. You can reconnect it at any time."

Select Revoke token to confirm, or Cancel to go back.

The account card updates to a disconnected status with a Reconnect link, and monitoring for that asset stops. A banner also appears at the top of the platform prompting you to reconnect - see the next section.

An account can lose its connection without anyone in Spikerz revoking it. This section explains how you will know, what it means for your protection, and how to get monitoring back.

A banner at the top of the platform. Whenever one or more of your assets are disconnected, Spikerz shows a red banner across the top of the screen:

"Reconnect X assets to reactivate threats and violations monitoring" - with a Reconnect assets link on the right-hand side.

The number tells you how many assets are currently disconnected. The banner stays visible until every disconnected asset has been reconnected or removed.

The account card. On the All Accounts page, a disconnected account shows a disconnected status in place of its usual health indicators, together with a Reconnect link.

A gap in your alerts. No new alerts are raised for a disconnected asset, so an account that has gone quiet in an otherwise busy feed is worth checking.

The most common causes:

Note: a disconnection is not in itself a sign of compromise - token expiry is routine. But an unexpected disconnection alongside a password, recovery-detail, or 2FA change you do not recognize should be treated as a possible incident. Check the account's feed on the Alerts page before reconnecting.

Spikerz can only see an account through a valid token. While an asset is disconnected:

Your existing data is safe: past alerts, reports, and history remain in the workspace, and monitoring resumes when the asset is reconnected. Depending on the platform, however, activity that took place during the gap may not be recoverable afterwards - which is why reconnecting promptly matters.

Reconnecting works the same way on every platform. There are three routes into it, and all three end at the same place - the platform's own authorization screen, described in How to connect your social account:

Pick whichever route you are closest to, then follow Completing the Platform Authorization below.

In the red banner at the top of the platform, select Reconnect assets on the right-hand side. Spikerz takes you to the disconnected assets so you can restore them.

Work through them one at a time. Once every disconnected asset is reconnected, the banner disappears. If it is still showing, at least one asset is still disconnected - check the All Accounts page to find which.

On the All Accounts page, locate the disconnected account card and select the three-dot menu icon.

Select Reconnect in the dropdown. This option is available to admins and members, and appears only while the account is disconnected. You can also use the Reconnect link shown directly on the disconnected account card.

Any disconnected asset can also be restored through the standard Add account flow, which takes you back through the platform's authorization. This works for every platform Spikerz supports.

Because the asset already exists in your workspace, adding it again restores the existing asset rather than creating a duplicate - its alerts, reports, history, and settings are preserved.

This route is useful when you are already on the Add account screen, when you need to reconnect several assets across different platforms in one pass, or when the Reconnect action does not complete for some reason.

For the full connect flow, platform by platform, see How to connect your social account. If your workspace connects Meta assets through a system user, see Meta System User Integration.

Whichever route you took, you are redirected to the connect page for that platform. Sign in with the account that holds the required permissions, and approve the Spikerz authorization request. The authorization screens are the same ones covered in How to connect your social account - use that guide if you need the platform-by-platform detail.

Important: reconnect with the same platform user and the same permission scopes that were used originally. Signing in as a different user, or declining any of the requested permissions, can leave the asset only partially connected - some protections will not resume. For what each permission is used for, see the Spikerz Platform Permissions Guide.

Back on the All Accounts page, the card should show the account as connected again and the banner should clear. Monitoring resumes automatically - allow a short while for the first scan to complete and for the account's data to repopulate.

Work through these in order:

Removing an asset permanently deletes the account and all its associated data from the workspace. Unlike revoking a token, this cannot be undone.

If you only want to stop monitoring for now, revoke the token instead. Remove an asset when the account is being retired, or when it is leaving your workspace for good.

A safety checklist ensures you have updated your login details before removal, so that you are not locked out of an account whose credentials Spikerz manages.

On the account card, select the three-dot menu icon.

Select Remove asset at the bottom of the dropdown - shown in red, as a destructive action. This option is only available to admins.

If the account has active security features - email, phone, password rotation, or 2FA managed by Spikerz - a checklist dialog appears:

"Before removing this account, make sure you've updated your login details. Skipping these steps may permanently lock you out of your account."

Each applicable item must be checked before you can continue:

If the account has no active security features, this step is skipped automatically.

A final confirmation dialog appears:

"Are you sure you want to remove {account name} from Spikerz? This will permanently delete all associated data."

Select Remove asset to confirm, or Cancel to go back.

The account card disappears from the All Accounts page, and all associated data is deleted from the workspace. To protect the account again later, connect it from scratch through the Add account flow - see How to connect your social account.