TLDR: On September 1 we will remove deprecated parameters that were used to obtain tokens in MediaWiki API. If your script/tool/bot or gadget was using these deprecated parameters, it will break unless you migrate it.

MediaWiki Action API clients (tool, scripts and bots that make calls to /w/api.php) sometimes need to obtain a token before making a write operation. Before MediaWiki 1.24 (November 2014) these tokens were obtained by using `token` property in various action api endpoints:

- action=tokens [1]
- `rctoken` in action=query&list=recentchanges [2]
- `rvtoken` in action=query&prop=revisions [3]
- `intoken` in action=query&prop=info [4]
- `ustoken` in action=query&list=users[5]
- `preferencestoken` in action=query&meta=userinfo [6]

Since 2014, a new API Module action=query&meta=tokens [7] was added where all these various tokens were consolidated. You can find more documentation for the deprecated API calls in [8] and guide for the new API calls at [9]

In a nutshell, the migration is trivial. If your script/tool/gadget or bot used to make an API call like

```
curl https://en.wikipedia.org/w/api.php?action=tokens&type=csrf

{
    "warnings": {
        "main": {
            "*": "Subscribe to the mediawiki-api-announce mailing list at <https://lists.wikimedia.org/mailman/listinfo/mediawiki-api-announce> for notice of API deprecations and breaking changes. Use [[Special:ApiFeatureUsage]] to see usage of deprecated features by your application."
        },
        "tokens": {
            "*": "\"action=tokens\" has been deprecated. Please use \"action=query&meta=tokens\" instead."
        }
    },
    "tokens": {
        "csrftoken": "<redactedtoken>+\\"
    }
}

```

You simply replace it with

```
curl https://en.wikipedia.org/w/api.php?action=query&meta=tokens&type=csrf

{
    "batchcomplete": "",
    "query": {
        "tokens": {
            "csrftoken": "<redactedtoken>+\\"
        }
    }
}
```

and change the object you pull out the token from result['tokens'] to result['query']['tokens'].

If you are using gadgets/scripts you've copied from another wiki, try updating them from the source - it might have already been fixed.

We are aiming to remove this functionality on September 1. These API calls were deprecated for 7 years and removing them will unlock some important refactoring we are working on now. We recognize this is a tight deadline, so we want to be flexible with it. If there's a need from the community to extend the deadline, please reach us on wikitech-l@lists.wikimedia.org. You can find more information on Phabricator [10]

[1] https://en.wikipedia.org/w/api.php?action=help&modules=tokens
[2] https://en.wikipedia.org/w/api.php?action=help&modules=query%2Brecentchanges
[3] https://en.wikipedia.org/w/api.php?action=help&modules=query%2Brevisions
[4] https://en.wikipedia.org/w/api.php?action=help&modules=query%2Binfo
[5] https://en.wikipedia.org/w/api.php?action=help&modules=query%2Busers
[6] https://en.wikipedia.org/w/api.php?action=help&modules=query%2Buserinfo
[7] https://en.wikipedia.org/w/api.php?action=help&modules=query%2Btokens
[8] https://www.mediawiki.org/wiki/API:Tokens_(action)
[9] https://www.mediawiki.org/wiki/API:Tokens
[10] https://phabricator.wikimedia.org/T280806