# Can't use Variable acess/token on headers value on Call API column

**URL:** <https://community.glideapps.com/t/cant-use-variable-acess-token-on-headers-value-on-call-api-column/65726>\
**Category:** Ask for Help\
**Created:** [September 2, 2023, 10:01pm UTC](https://community.glideapps.com/t/cant-use-variable-acess-token-on-headers-value-on-call-api-column/65726 "2023-09-02T22:01:19Z")\
**Posts on this page:** 3\
**Page:** 2

<div class="post-metadata">

**Author:** ![Jimmy\_Carter](https://sea2.discourse-cdn.com/flex002/user_avatar/community.glideapps.com/jimmy_carter/32/84627_2.png) [@Jimmy\_Carter](https://community.glideapps.com/u/Jimmy_Carter)\
**Post date:** [January 30, 2025, 12:42am UTC](https://community.glideapps.com/t/cant-use-variable-acess-token-on-headers-value-on-call-api-column/65726/21 "2025-01-30T00:42:56Z")

</div>

Yes that is what I plan on doing for the access\_token but I need a refresh token for each of my companies. I want to keep the refresh token secure but I’m not sure how Glide’s SECRET parameter works (I saw it on the glide API video). I’m going to be upgrading from a legacy starter to a business subscription soon and want to be prepared.

---

<div class="post-metadata">

**Author:** ![Darren\_Murphy](https://sea2.discourse-cdn.com/flex002/user_avatar/community.glideapps.com/darren_murphy/32/47326_2.png) [@Darren\_Murphy](https://community.glideapps.com/u/Darren_Murphy)\
**Post date:** [January 30, 2025, 1:04am UTC](https://community.glideapps.com/t/cant-use-variable-acess-token-on-headers-value-on-call-api-column/65726/22 "2025-01-30T01:04:24Z")

</div>

You’re referring to the “Secret” parameters in the Call API action, yes?  
These are stored server side, so you can safely/securely use access tokens there.

---

<div class="post-metadata">

**Author:** ![james](https://sea2.discourse-cdn.com/flex002/user_avatar/community.glideapps.com/james/32/71213_2.png) [@james](https://community.glideapps.com/u/james)\
**Post date:** [February 11, 2025, 3:36pm UTC](https://community.glideapps.com/t/cant-use-variable-acess-token-on-headers-value-on-call-api-column/65726/23 "2025-02-11T15:36:52Z")

</div>

I ended up using this method. Seems to work well 🙂

[Previous page](https://community.glideapps.com/t/cant-use-variable-acess-token-on-headers-value-on-call-api-column/65726.md?page=1)