{"templateId":"markdown","versions":[{"version":"v1.40","label":"v1.40 STS","link":"/products/custody/accounts-and-assets/tokenization/token-management","default":true,"active":false,"folderId":"c15a2701"},{"version":"v1.39","label":"v1.39 STS","link":"/products/custody/v1.39/accounts-and-assets/tokenization/token-management","default":false,"active":false,"folderId":"c15a2701"},{"version":"v1.38","label":"v1.38 STS","link":"/products/custody/v1.38/accounts-and-assets/tokenization/token-management","default":false,"active":true,"folderId":"c15a2701"},{"version":"v1.34","label":"v1.34 LTS","link":"/products/custody/v1.34/accounts-and-assets/tokenization/token-management","default":false,"active":false,"folderId":"c15a2701"},{"version":"v1.26","label":"v1.26 LTS","link":"/products/custody/v1.26/accounts-and-assets/tokenization/token-management","default":false,"active":false,"folderId":"c15a2701"},{"version":"v1.19","label":"v1.19 LTS","link":"/products/custody/v1.19/accounts-and-assets/tokenization/token-management","default":false,"active":false,"folderId":"c15a2701"},{"version":"v1.15","label":"v1.15 LTS","link":"/products/custody/v1.15/accounts-and-assets/tokenization/token-management","default":false,"active":false,"folderId":"c15a2701"}],"sharedDataIds":{"sidebar":"sidebar-products/custody/@v1.15/sidebars.yaml"},"props":{"metadata":{"markdoc":{"tagList":["admonition"]},"type":"markdown"},"seo":{"title":"Token management","description":"User guides, API reference, and support resources.","siteUrl":"https://docs.ripple.com","lang":"en-US","llmstxt":{"hide":false,"sections":[{"title":"Table of contents","includeFiles":["**/*"],"excludeFiles":[]}],"excludeFiles":[]}},"dynamicMarkdocComponents":[],"compilationErrors":[],"ast":{"$$mdtype":"Tag","name":"article","attributes":{},"children":[{"$$mdtype":"Tag","name":"Heading","attributes":{"level":1,"id":"token-management","__idx":0},"children":["Token management"]},{"$$mdtype":"Tag","name":"Admonition","attributes":{"type":"info","name":"Executive summary"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Token management in ","Ripple Custody"," controls which tokens are visible and usable in the platform."]}]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["The Allowlist-Only visibility model ensures operators only see explicitly approved tokens."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Classify tokens as allowlisted, unclassified, or denylisted."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Bulk operations enable efficient token classification at scale."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Intent-based security protects all classification changes."]}]}]},{"$$mdtype":"Tag","name":"Admonition","attributes":{"type":"success","name":"Why this matters"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Custody operators face a growing challenge: anyone can send tokens to a blockchain address without permission. This creates security and operational risks that token management directly addresses."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Without token management:"]}," Operators waste time reviewing unsolicited tokens, scam tokens can mislead staff, and cluttered interfaces increase operational errors."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["With token management:"]}," Only approved tokens appear in balances and transactions, new tokens are quarantined until reviewed, and denylisted tokens are permanently hidden."]}]},{"$$mdtype":"Tag","name":"Admonition","attributes":{"type":"warning","name":"Prerequisites"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Before using token management, you should understand:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/products/custody/v1.38/governance/intents"},"children":["Intents"]}," — Token classification changes follow the standard intent workflow."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Ripple Custody Auth & Sign mobile app — Required to sign classification intents."]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"the-problem-unsolicited-tokens","__idx":1},"children":["The problem: unsolicited tokens"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Blockchain addresses can receive tokens from anyone without approval. This creates operational challenges:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Spam tokens clutter the interface and waste operator time."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Scam tokens can mislead operators into risky transactions."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Auto-discovered tokens from incoming transactions may be unknown or unwanted."]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Token management solves these problems by hiding unverified tokens from standard views until an operator explicitly approves them."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"allowlist-only-visibility-model","__idx":2},"children":["Allowlist-Only visibility model"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["With Allowlist-Only mode:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Only allowlisted token balances appear in account views."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Transfers involving unclassified or denylisted tokens are filtered at the transfer level."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["You can only create transfer orders for allowlisted tokens."]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["This filtering happens at the individual transfer level, not the transaction level. A transaction containing both allowlisted and non-allowlisted tokens shows only the allowlisted portions."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"token-lifecycle","__idx":3},"children":["Token lifecycle"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Tokens follow a defined lifecycle in ","Ripple Custody",":"]},{"$$mdtype":"Tag","name":"Diagram","attributes":{"data-language":"mermaid","diagramType":"mermaid","diagramSource":"stateDiagram-v2\n [*] --> Unclassified: Auto-discovered or imported\n Unclassified --> Allowlisted: Allowlist\n Unclassified --> Denylisted: Denylist\n Allowlisted --> Denylisted: Denylist\n Denylisted --> Allowlisted: Restore\n","diagramHtml":"

Auto-discovered or imported

Allowlist

Denylist

Denylist

Restore

Unclassified

Allowlisted

Denylisted

","diagramHtmlDark":"

Auto-discovered or imported

Allowlist

Denylist

Denylist

Restore

Unclassified

Allowlisted

Denylisted

"},"children":["stateDiagram-v2\n [*] --> Unclassified: Auto-discovered or imported\n Unclassified --> Allowlisted: Allowlist\n Unclassified --> Denylisted: Denylist\n Allowlisted --> Denylisted: Denylist\n Denylisted --> Allowlisted: Restore\n"]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"how-tokens-enter-the-system","__idx":4},"children":["How tokens enter the system"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["When an incoming transaction contains a new token, ","Ripple Custody"," registers it automatically as unclassified."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Operators can add tokens manually, which land in the allowlisted state."]}]},{"$$mdtype":"Tag","name":"Admonition","attributes":{"type":"info","name":"Token and ticker terminology"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The documentation uses ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["token"]}," for the user-facing asset, currency, or contract asset that operators manage. API payloads and some intent types use ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["ticker"]}," for the internal token record, such as ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["tickerId"]},", ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["v0_ValidateTickers"]},", ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["v0_LockTicker"]},", and ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["v0_UnlockTicker"]},". When an intent asks for a ticker, use the token's ticker ID from the token/ticker API response."]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"state-transitions","__idx":5},"children":["State transitions"]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"From"},"children":["From"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"To"},"children":["To"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Action"},"children":["Action"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"API intent"},"children":["API intent"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Unclassified"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Allowlisted"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Allowlist"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["v0_ValidateTickers"]}]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Unclassified"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Denylisted"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Denylist"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["v0_ValidateTickers"]}," with ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["lock: Locked"]}]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Allowlisted"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Denylisted"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Denylist"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["v0_LockTicker"]}]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Denylisted"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Allowlisted"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Restore"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"code","attributes":{},"children":["v0_UnlockTicker"]}]}]}]}]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"token-management-screen","__idx":6},"children":["Token management screen"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The token management screen provides a centralized view for managing all tokens:"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"img","attributes":{"src":"/assets/token_homepage_main.bd22653a1d98fc0c03d64df217060cbe6dd18e1c3992cc148fdc970152fedda9.ff5a377d.png","alt":"Token management homepage showing tabs for allowlisted, unclassified, and denylisted tokens"},"children":[]}]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Separate tabs for allowlisted, unclassified, and denylisted tokens."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Each tab shows the number of tokens in that state."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Allowlist or denylist multiple tokens at once."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Find tokens by name, symbol, or ledger."]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"accessing-token-management","__idx":7},"children":["Accessing token management"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Navigate to ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Custody Admin > Token Management"]}," to access the token management screen."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"security-model","__idx":8},"children":["Security model"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Token management uses the standard ","Ripple Custody"," intent-based security model:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Every classification change creates an intent that must be signed."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Operators sign intents using the Ripple Custody Auth & Sign mobile app."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Before signing, operators can review the full JSON payload including asset IDs, contract addresses, and the specific action."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Organizations can require multiple approvals before changes take effect."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["All classification changes are logged with intent IDs and timestamps."]}]},{"$$mdtype":"Tag","name":"Admonition","attributes":{"type":"info"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["When you submit a token classification change, a \"Check your device\" prompt appears. Use the Ripple Custody Auth & Sign mobile app to review and sign the intent."]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"risk-mitigation","__idx":9},"children":["Risk mitigation"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The Allowlist-Only model helps protect against:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Unsolicited tokens from marketing campaigns are hidden by default."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Tokens designed to impersonate legitimate assets are not visible."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Tokens with harmful smart contract logic remain hidden until reviewed."]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The denylisted tab includes a warning banner identifying tokens as potentially malicious, phishing attempts, or security risks."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":[{"$$mdtype":"Tag","name":"img","attributes":{"src":"/assets/token_denied_assets.2465e8a92e0edabb48f57cc5b2c2b7d59af0c47edd982c08ab12cbf21df56818.ff5a377d.png","alt":"Denylisted tokens view showing warning banner"},"children":[]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"supported-token-standards","__idx":10},"children":["Supported token standards"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["You can manage tokens that follow these standards:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["ERC-20 (fungible tokens)."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["ERC-721 (NFTs)."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["ERC-1155 (multi-token)."]}]},{"$$mdtype":"Tag","name":"Admonition","attributes":{"type":"warning","name":"ERC-20 metadata requirement"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["ERC-20 tokens must implement the ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["IERC20Metadata"]}," interface — the contract must expose ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["name()"]},", ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["symbol()"]},", and ",{"$$mdtype":"Tag","name":"code","attributes":{},"children":["decimals()"]},". Contracts that omit any of these methods are not supported and will be silently ignored by the system. For details, see ",{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/products/custody/v1.38/reference/supported-ledgers#erc-20-metadata-requirement"},"children":["ERC-20 metadata requirement"]},"."]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Native blockchain currencies (such as ETH or XRP) are always visible and cannot be denylisted."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"related-topics","__idx":11},"children":["Related topics"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/products/custody/v1.38/accounts-and-assets/tokenization/token-management/ui"},"children":["Manage tokens in the UI"]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/products/custody/v1.38/accounts-and-assets/tokenization/token-management/api"},"children":["Manage tokens with the API"]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/products/custody/v1.38/accounts-and-assets/tokenization/ledger-specific"},"children":["Ledger-specific token operations"]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/products/custody/v1.38/accounts-and-assets/tokenization/xrpl-mpts"},"children":["XRPL Multi-Purpose Tokens"]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/products/custody/v1.38/accounts-and-assets/accounts/overview"},"children":["Accounts"]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"MarkdownLink","attributes":{"href":"/products/custody/v1.38/governance/intents"},"children":["Intents"]}]}]}]},"headings":[{"value":"Token management","id":"token-management","depth":1},{"value":"The problem: unsolicited tokens","id":"the-problem-unsolicited-tokens","depth":2},{"value":"Allowlist-Only visibility model","id":"allowlist-only-visibility-model","depth":2},{"value":"Token lifecycle","id":"token-lifecycle","depth":2},{"value":"How tokens enter the system","id":"how-tokens-enter-the-system","depth":3},{"value":"State transitions","id":"state-transitions","depth":3},{"value":"Token management screen","id":"token-management-screen","depth":2},{"value":"Accessing token management","id":"accessing-token-management","depth":3},{"value":"Security model","id":"security-model","depth":2},{"value":"Risk mitigation","id":"risk-mitigation","depth":2},{"value":"Supported token standards","id":"supported-token-standards","depth":2},{"value":"Related topics","id":"related-topics","depth":2}],"frontmatter":{"seo":{"title":"Token management"}},"lastModified":"2026-07-27T10:10:43.000Z","pagePropGetterError":{"message":"","name":""}},"slug":"/products/custody/v1.38/accounts-and-assets/tokenization/token-management","userData":{"isAuthenticated":false,"teams":["anonymous"]},"isPublic":true}