# Connecting Ardoq

Connect Ardoq so Eraser can draw architecture diagrams from the components and references in the workspaces you choose. Eraser reads Ardoq with an API token that has read access only.

Everything below starts from **Settings → [Data Sources](https://app.eraser.io/dashboard/all?settings=dataSources)** in Eraser – keep that tab open, since you'll paste the token into it.

## Quick overview

1. Create a read-only API token ([how-to](/connecting-ardoq#1-create-a-read-only-api-token))
2. Enter the connection details ([how-to](/connecting-ardoq#2-enter-the-connection-details))
3. Pick the workspaces to import ([how-to](/connecting-ardoq#3-pick-the-workspaces-to-import))

## What Eraser gets access to

Eraser reads the components, references, and fields in the workspaces you pick. When a reference points into a workspace you didn't pick, Eraser reads the component at the other end too, so the relationship isn't lost. Eraser never writes to Ardoq.

The token is stored encrypted and is never sent to AI.

## 1. Create a read-only API token

<Callout kind="warning" title="Required role">
The token acts as the Ardoq user it belongs to. Create it for a user with the **Reader** role on the workspaces you want to import.
</Callout>

In Ardoq, create an API token and copy it, along with the organization label shown next to it.

<Callout kind="note">
Ardoq expires tokens that go unused for 60 days. Eraser uses the token on every scan; if it does expire, choose **Reconnect** and paste a new one.
</Callout>

## 2. Enter the connection details

Open **Settings → Data Sources** and pick **Ardoq** – from the list of data sources, or from **Add connection** once one is connected.

Enter your Ardoq host – `app.ardoq.com`, or your organization's own ardoq.com host – the organization label, and the token.

<Figure src="/assets/data-sources-ardoq-connect-pane.png" alt="The Connect Ardoq form in Eraser, with the host, organization label, and token filled in" border />

Choose **Verify and select workspaces**.

## 3. Pick the workspaces to import

Eraser now shows every workspace the token can read. Tick the ones it should import.

<Figure src="/assets/data-sources-ardoq-pick-workspaces.png" alt="The workspace picker in Eraser, listing four Ardoq workspaces" border />

Choose **Connect**, and Eraser runs its first scan.

## After connecting

Each connection appears in **Settings → [Data Sources](https://app.eraser.io/dashboard/all?settings=dataSources)**, showing its workspaces and when it last synced.

* **Rescan** reads the workspaces again. There is no scheduled background scan – Eraser reads Ardoq when you ask it to.
* **Reconnect** replaces the token, keeping the connection's history.
* **Active** lets Eraser scan the workspaces and use them as context in AI chat. **Inactive** stops both, without discarding the connection.
* **Remove from Eraser** disconnects and forgets the connection.

Removing a connection does not change anything in Ardoq. To revoke access completely, also delete the token.

Once a connection is active, anyone on the team can reference it in AI chat to generate architecture diagrams – see [Cloud diagrams](/cloud-diagrams).

## Troubleshooting

| What Eraser says | What it means |
|---|---|
| Use app.ardoq.com or your organization's custom ardoq.com host | The host isn't an Ardoq address. Enter `app.ardoq.com`, or the host your organization signs in at. |
| This token belongs to the Ardoq organization … | The organization label doesn't match the token. Use the label shown next to the token in Ardoq. |
| Authentication check failed (HTTP 401) | The token was deleted or has expired. Choose **Reconnect** and paste a new one. |
| An Ardoq workspace context could not be read | A selected workspace was deleted, or the token's user lost access to it. Restore the access; otherwise, remove the connection and connect again without that workspace. |
| Ardoq inventory exceeded … rows | The selected workspaces hold too much to import at once. Select fewer workspaces. |