diff --git a/src/components/admin/user/webapi/CreateWebapiModal.vue b/src/components/admin/user/webapi/CreateWebapiModal.vue
new file mode 100644
index 0000000..1b3df8d
--- /dev/null
+++ b/src/components/admin/user/webapi/CreateWebapiModal.vue
@@ -0,0 +1,81 @@
+<template>
+  <div class="w-full md:max-w-md">
+    <div class="flex flex-col items-center">
+      <p class="text-xl font-medium">Webapi-Token erstellen</p>
+    </div>
+    <br />
+    <form class="flex flex-col gap-4 py-2" @submit.prevent="triggerCreateWebapi">
+      <div>
+        <label for="title">Bezeichnung</label>
+        <input type="text" id="title" required />
+      </div>
+      <div class="w-full">
+        <label for="expiry">Ablaufdatum (optional)</label>
+        <input type="date" id="expiry" step="1" />
+      </div>
+      <div class="flex flex-row gap-2">
+        <button primary type="submit" :disabled="status == 'loading' || status?.status == 'success'">erstellen</button>
+        <Spinner v-if="status == 'loading'" class="my-auto" />
+        <SuccessCheckmark v-else-if="status?.status == 'success'" />
+        <FailureXMark v-else-if="status?.status == 'failed'" />
+      </div>
+    </form>
+
+    <div class="flex flex-row justify-end">
+      <div class="flex flex-row gap-4 py-2">
+        <button primary-outline @click="closeModal" :disabled="status == 'loading' || status?.status == 'success'">
+          abbrechen
+        </button>
+      </div>
+    </div>
+  </div>
+</template>
+
+<script setup lang="ts">
+import { defineComponent } from "vue";
+import { mapState, mapActions } from "pinia";
+import { useModalStore } from "@/stores/modal";
+import Spinner from "@/components/Spinner.vue";
+import SuccessCheckmark from "@/components/SuccessCheckmark.vue";
+import FailureXMark from "@/components/FailureXMark.vue";
+import { useWebapiStore } from "@/stores/admin/user/webapi";
+import type { CreateWebapiViewModel } from "../../../../viewmodels/admin/user/webapi.models";
+</script>
+
+<script lang="ts">
+export default defineComponent({
+  data() {
+    return {
+      status: null as null | "loading" | { status: "success" | "failed"; reason?: string },
+      timeout: undefined as any,
+    };
+  },
+  beforeUnmount() {
+    try {
+      clearTimeout(this.timeout);
+    } catch (error) {}
+  },
+  methods: {
+    ...mapActions(useModalStore, ["closeModal"]),
+    ...mapActions(useWebapiStore, ["createWebapi"]),
+    triggerCreateWebapi(e: any) {
+      let formData = e.target.elements;
+      let createWebapi: CreateWebapiViewModel = {
+        title: formData.title.value,
+        expiry: formData.expiry.value,
+      };
+      this.status = "loading";
+      this.createWebapi(createWebapi)
+        .then(() => {
+          this.status = { status: "success" };
+          this.timeout = setTimeout(() => {
+            this.closeModal();
+          }, 1500);
+        })
+        .catch(() => {
+          this.status = { status: "failed" };
+        });
+    },
+  },
+});
+</script>
diff --git a/src/components/admin/user/webapi/DeleteWebapiModal.vue b/src/components/admin/user/webapi/DeleteWebapiModal.vue
new file mode 100644
index 0000000..002157c
--- /dev/null
+++ b/src/components/admin/user/webapi/DeleteWebapiModal.vue
@@ -0,0 +1,75 @@
+<template>
+  <div class="w-full md:max-w-md">
+    <div class="flex flex-col items-center">
+      <p class="text-xl font-medium">Webapi-Token {{ webapi?.title }} löschen?</p>
+    </div>
+    <br />
+
+    <div class="flex flex-row gap-2">
+      <button primary :disabled="status == 'loading' || status?.status == 'success'" @click="triggerDeleteWebapi">
+        unwiederuflich löschen
+      </button>
+      <Spinner v-if="status == 'loading'" class="my-auto" />
+      <SuccessCheckmark v-else-if="status?.status == 'success'" />
+      <FailureXMark v-else-if="status?.status == 'failed'" />
+    </div>
+
+    <div class="flex flex-row justify-end">
+      <div class="flex flex-row gap-4 py-2">
+        <button primary-outline @click="closeModal" :disabled="status == 'loading' || status?.status == 'success'">
+          abbrechen
+        </button>
+      </div>
+    </div>
+  </div>
+</template>
+
+<script setup lang="ts">
+import { defineComponent } from "vue";
+import { mapState, mapActions } from "pinia";
+import { useModalStore } from "@/stores/modal";
+import Spinner from "@/components/Spinner.vue";
+import SuccessCheckmark from "@/components/SuccessCheckmark.vue";
+import FailureXMark from "@/components/FailureXMark.vue";
+import { useWebapiStore } from "@/stores/admin/user/webapi";
+</script>
+
+<script lang="ts">
+export default defineComponent({
+  data() {
+    return {
+      status: null as null | "loading" | { status: "success" | "failed"; reason?: string },
+      timeout: undefined as any,
+    };
+  },
+  beforeUnmount() {
+    try {
+      clearTimeout(this.timeout);
+    } catch (error) {}
+  },
+  computed: {
+    ...mapState(useModalStore, ["data"]),
+    ...mapState(useWebapiStore, ["webapis"]),
+    webapi() {
+      return this.webapis.find((r) => r.id == this.data);
+    },
+  },
+  methods: {
+    ...mapActions(useModalStore, ["closeModal"]),
+    ...mapActions(useWebapiStore, ["deleteWebapi"]),
+    triggerDeleteWebapi() {
+      this.status = "loading";
+      this.deleteWebapi(this.data)
+        .then(() => {
+          this.status = { status: "success" };
+          this.timeout = setTimeout(() => {
+            this.closeModal();
+          }, 1500);
+        })
+        .catch(() => {
+          this.status = { status: "failed" };
+        });
+    },
+  },
+});
+</script>
diff --git a/src/components/admin/user/webapi/WebapiListItem.vue b/src/components/admin/user/webapi/WebapiListItem.vue
new file mode 100644
index 0000000..64b2d19
--- /dev/null
+++ b/src/components/admin/user/webapi/WebapiListItem.vue
@@ -0,0 +1,107 @@
+<template>
+  <div class="flex flex-col h-fit w-full border border-primary rounded-md">
+    <div class="bg-primary p-2 text-white flex flex-row justify-between items-center">
+      <p>{{ webapi.title }} <small v-if="webapi.permissions.admin">(Admin)</small></p>
+      <div class="flex flex-row">
+        <div v-if="can('admin', 'user', 'webapi')" @click="openTokenViewModal">
+          <FingerPrintIcon class="w-5 h-5 p-1 box-content cursor-pointer" />
+        </div>
+        <RouterLink
+          v-if="can('admin', 'user', 'webapi')"
+          :to="{ name: 'admin-user-webapi-permission', params: { id: webapi.id } }"
+        >
+          <WrenchScrewdriverIcon class="w-5 h-5 p-1 box-content cursor-pointer" />
+        </RouterLink>
+        <RouterLink
+          v-if="can('update', 'user', 'webapi')"
+          :to="{ name: 'admin-user-webapi-edit', params: { id: webapi.id } }"
+        >
+          <PencilIcon class="w-5 h-5 p-1 box-content cursor-pointer" />
+        </RouterLink>
+        <div v-if="can('delete', 'user', 'webapi')" @click="openDeleteModal">
+          <TrashIcon class="w-5 h-5 p-1 box-content cursor-pointer" />
+        </div>
+      </div>
+    </div>
+    <div class="flex flex-col p-2">
+      <div class="flex flex-row gap-2">
+        <p class="">erstellt:</p>
+        <p class="grow overflow-hidden">
+          {{
+            new Date(webapi.createdAt).toLocaleDateString("de-DE", {
+              day: "2-digit",
+              month: "2-digit",
+              year: "numeric",
+              minute: "2-digit",
+              hour: "2-digit",
+            })
+          }}
+        </p>
+      </div>
+      <div class="flex flex-row gap-2">
+        <p class="">letzte Verwendung:</p>
+        <p class="grow overflow-hidden">
+          {{
+            webapi.lastUsage
+              ? new Date(webapi.lastUsage).toLocaleDateString("de-DE", {
+                  day: "2-digit",
+                  month: "2-digit",
+                  year: "numeric",
+                  minute: "2-digit",
+                  hour: "2-digit",
+                })
+              : "---"
+          }}
+        </p>
+      </div>
+      <div v-if="webapi.expiry" class="flex flex-row gap-2">
+        <p class="">verwendbar bis:</p>
+        <p class="grow overflow-hidden">
+          {{
+            new Date(webapi.expiry).toLocaleDateString("de-DE", {
+              day: "2-digit",
+              month: "2-digit",
+              year: "numeric",
+            })
+          }}
+        </p>
+      </div>
+    </div>
+  </div>
+</template>
+
+<script setup lang="ts">
+import { defineComponent, defineAsyncComponent, markRaw, type PropType } from "vue";
+import { mapState, mapActions } from "pinia";
+import { PencilIcon, WrenchScrewdriverIcon, TrashIcon, FingerPrintIcon } from "@heroicons/vue/24/outline";
+import type { WebapiViewModel } from "@/viewmodels/admin/user/webapi.models";
+import { RouterLink } from "vue-router";
+import { useAbilityStore } from "@/stores/ability";
+import { useModalStore } from "@/stores/modal";
+</script>
+
+<script lang="ts">
+export default defineComponent({
+  props: {
+    webapi: { type: Object as PropType<WebapiViewModel>, default: {} },
+  },
+  computed: {
+    ...mapState(useAbilityStore, ["can"]),
+  },
+  methods: {
+    ...mapActions(useModalStore, ["openModal"]),
+    openTokenViewModal() {
+      this.openModal(
+        markRaw(defineAsyncComponent(() => import("@/components/admin/user/webapi/WebapiTokenModal.vue"))),
+        this.webapi.id
+      );
+    },
+    openDeleteModal() {
+      this.openModal(
+        markRaw(defineAsyncComponent(() => import("@/components/admin/user/webapi/DeleteWebapiModal.vue"))),
+        this.webapi.id
+      );
+    },
+  },
+});
+</script>
diff --git a/src/components/admin/user/webapi/WebapiTokenModal.vue b/src/components/admin/user/webapi/WebapiTokenModal.vue
new file mode 100644
index 0000000..e3b6d91
--- /dev/null
+++ b/src/components/admin/user/webapi/WebapiTokenModal.vue
@@ -0,0 +1,56 @@
+<template>
+  <div class="relative w-full md:max-w-md">
+    <div class="flex flex-col items-center">
+      <p class="text-xl font-medium">Webapi-Token</p>
+    </div>
+    <br />
+    <div class="flex flex-col gap-2">
+      <TextCopy :copyText="token" />
+    </div>
+
+    <div class="flex flex-row justify-end">
+      <div class="flex flex-row gap-4 py-2">
+        <button primary-outline @click="closeModal">schließen</button>
+      </div>
+    </div>
+  </div>
+</template>
+
+<script setup lang="ts">
+import { defineComponent } from "vue";
+import { mapState, mapActions } from "pinia";
+import { RouterLink } from "vue-router";
+import { useModalStore } from "@/stores/modal";
+import { useCalendarTypeStore } from "@/stores/admin/settings/calendarType";
+import type { CalendarTypeViewModel } from "@/viewmodels/admin/settings/calendarType.models";
+import { Listbox, ListboxButton, ListboxOptions, ListboxOption, ListboxLabel } from "@headlessui/vue";
+import { CheckIcon, ChevronUpDownIcon } from "@heroicons/vue/20/solid";
+import TextCopy from "@/components/TextCopy.vue";
+import { CalendarDaysIcon, InformationCircleIcon } from "@heroicons/vue/24/outline";
+import { host } from "@/serverCom";
+import { useWebapiStore } from "../../../../stores/admin/user/webapi";
+</script>
+
+<script lang="ts">
+export default defineComponent({
+  data() {
+    return {
+      token: "" as string,
+    };
+  },
+  computed: {
+    ...mapState(useModalStore, ["data"]),
+  },
+  mounted() {
+    this.fetchWebapiTokenById(this.data)
+      .then((res) => {
+        this.token = res.data;
+      })
+      .catch(() => {});
+  },
+  methods: {
+    ...mapActions(useModalStore, ["closeModal"]),
+    ...mapActions(useWebapiStore, ["fetchWebapiTokenById"]),
+  },
+});
+</script>
diff --git a/src/router/index.ts b/src/router/index.ts
index 335f7fa..eeb1ba3 100644
--- a/src/router/index.ts
+++ b/src/router/index.ts
@@ -582,6 +582,36 @@ const router = createRouter({
                 },
               ],
             },
+            {
+              path: "webapi",
+              name: "admin-user-webapi-route",
+              component: () => import("@/views/RouterView.vue"),
+              meta: { type: "read", section: "user", module: "webapi" },
+              beforeEnter: [abilityAndNavUpdate],
+              children: [
+                {
+                  path: "",
+                  name: "admin-user-webapi",
+                  component: () => import("@/views/admin/user/webapi/Webapi.vue"),
+                },
+                {
+                  path: ":id/edit",
+                  name: "admin-user-webapi-edit",
+                  component: () => import("@/views/admin/user/webapi/WebapiEdit.vue"),
+                  meta: { type: "update", section: "user", module: "webapi" },
+                  beforeEnter: [abilityAndNavUpdate],
+                  props: true,
+                },
+                {
+                  path: ":id/permission",
+                  name: "admin-user-webapi-permission",
+                  component: () => import("@/views/admin/user/webapi/WebapiEditPermission.vue"),
+                  meta: { type: "update", section: "user", module: "webapi" },
+                  beforeEnter: [abilityAndNavUpdate],
+                  props: true,
+                },
+              ],
+            },
           ],
         },
         {
diff --git a/src/stores/admin/navigation.ts b/src/stores/admin/navigation.ts
index 782e42f..bd1bc84 100644
--- a/src/stores/admin/navigation.ts
+++ b/src/stores/admin/navigation.ts
@@ -131,6 +131,7 @@ export const useNavigationStore = defineStore("navigation", {
           main: [
             ...(abilityStore.can("read", "user", "user") ? [{ key: "user", title: "Benutzer" }] : []),
             ...(abilityStore.can("read", "user", "role") ? [{ key: "role", title: "Rollen" }] : []),
+            ...(abilityStore.can("read", "user", "webapi") ? [{ key: "webapi", title: "Webapi-Token" }] : []),
           ],
         },
       } as navigationModel;
diff --git a/src/stores/admin/user/webapi.ts b/src/stores/admin/user/webapi.ts
new file mode 100644
index 0000000..66a57e7
--- /dev/null
+++ b/src/stores/admin/user/webapi.ts
@@ -0,0 +1,63 @@
+import { defineStore } from "pinia";
+import type {
+  CreateWebapiViewModel,
+  UpdateWebapiViewModel,
+  WebapiViewModel,
+} from "@/viewmodels/admin/user/webapi.models";
+import { http } from "@/serverCom";
+import type { PermissionObject } from "@/types/permissionTypes";
+import type { AxiosResponse } from "axios";
+
+export const useWebapiStore = defineStore("webapi", {
+  state: () => {
+    return {
+      webapis: [] as Array<WebapiViewModel>,
+      loading: null as null | "loading" | "success" | "failed",
+    };
+  },
+  actions: {
+    fetchWebapis() {
+      this.loading = "loading";
+      http
+        .get("/admin/webapi")
+        .then((result) => {
+          this.webapis = result.data;
+          this.loading = "success";
+        })
+        .catch((err) => {
+          this.loading = "failed";
+        });
+    },
+    fetchWebapiById(id: number): Promise<AxiosResponse<any, any>> {
+      return http.get(`/admin/webapi/${id}`);
+    },
+    fetchWebapiTokenById(id: number): Promise<AxiosResponse<any, any>> {
+      return http.get(`/admin/webapi/${id}/token`);
+    },
+    async createWebapi(webapi: CreateWebapiViewModel): Promise<AxiosResponse<any, any>> {
+      const result = await http.post("/admin/webapi", webapi);
+      this.fetchWebapis();
+      return result;
+    },
+    async updateActiveWebapi(id: number, webapi: UpdateWebapiViewModel): Promise<AxiosResponse<any, any>> {
+      const result = await http.patch(`/admin/webapi/${id}`, webapi);
+      this.fetchWebapis();
+      return result;
+    },
+    async updateActiveWebapiPermissions(
+      webapi: number,
+      permission: PermissionObject
+    ): Promise<AxiosResponse<any, any>> {
+      const result = await http.patch(`/admin/webapi/${webapi}/permissions`, {
+        permissions: permission,
+      });
+      this.fetchWebapis();
+      return result;
+    },
+    async deleteWebapi(webapi: number): Promise<AxiosResponse<any, any>> {
+      const result = await http.delete(`/admin/webapi/${webapi}`);
+      this.fetchWebapis();
+      return result;
+    },
+  },
+});
diff --git a/src/types/permissionTypes.ts b/src/types/permissionTypes.ts
index 95ea543..5ba5cb4 100644
--- a/src/types/permissionTypes.ts
+++ b/src/types/permissionTypes.ts
@@ -14,6 +14,7 @@ export type PermissionModule =
   | "calendar_type"
   | "user"
   | "role"
+  | "webapi"
   | "query"
   | "query_store"
   | "template"
@@ -55,6 +56,7 @@ export const permissionModules: Array<PermissionModule> = [
   "calendar_type",
   "user",
   "role",
+  "webapi",
   "query",
   "query_store",
   "template",
@@ -75,5 +77,5 @@ export const sectionsAndModules: SectionsAndModulesObject = {
     "template_usage",
     "newsletter_config",
   ],
-  user: ["user", "role"],
+  user: ["user", "role", "webapi"],
 };
diff --git a/src/viewmodels/admin/user/webapi.models.ts b/src/viewmodels/admin/user/webapi.models.ts
new file mode 100644
index 0000000..015837c
--- /dev/null
+++ b/src/viewmodels/admin/user/webapi.models.ts
@@ -0,0 +1,20 @@
+import type { PermissionObject } from "@/types/permissionTypes";
+
+export interface WebapiViewModel {
+  id: number;
+  permissions: PermissionObject;
+  title: string;
+  createdAt: Date;
+  lastUsage?: Date;
+  expiry?: Date;
+}
+
+export interface CreateWebapiViewModel {
+  title: string;
+  expiry?: Date;
+}
+
+export interface UpdateWebapiViewModel {
+  title: string;
+  expiry?: Date;
+}
diff --git a/src/views/admin/user/webapi/Webapi.vue b/src/views/admin/user/webapi/Webapi.vue
new file mode 100644
index 0000000..75f264f
--- /dev/null
+++ b/src/views/admin/user/webapi/Webapi.vue
@@ -0,0 +1,52 @@
+<template>
+  <MainTemplate>
+    <template #topBar>
+      <div class="flex flex-row items-center justify-between pt-5 pb-3 px-7">
+        <h1 class="font-bold text-xl h-8">Webapi-Token</h1>
+      </div>
+    </template>
+    <template #diffMain>
+      <div class="flex flex-col gap-4 h-full pl-7">
+        <div class="flex flex-col gap-2 grow overflow-y-scroll pr-7">
+          <WebapiListItem v-for="webapi in webapis" :key="webapi.id" :webapi="webapi" />
+        </div>
+        <div class="flex flex-row gap-4">
+          <button v-if="can('create', 'user', 'webapi')" primary class="!w-fit" @click="openCreateModal">
+            Webapi-Token erstellen
+          </button>
+        </div>
+      </div>
+    </template>
+  </MainTemplate>
+</template>
+
+<script setup lang="ts">
+import { defineAsyncComponent, defineComponent, markRaw } from "vue";
+import { mapState, mapActions } from "pinia";
+import MainTemplate from "@/templates/Main.vue";
+import { useWebapiStore } from "@/stores/admin/user/webapi";
+import WebapiListItem from "@/components/admin/user/webapi/WebapiListItem.vue";
+import { useModalStore } from "@/stores/modal";
+import { useAbilityStore } from "@/stores/ability";
+</script>
+
+<script lang="ts">
+export default defineComponent({
+  computed: {
+    ...mapState(useWebapiStore, ["webapis"]),
+    ...mapState(useAbilityStore, ["can"]),
+  },
+  mounted() {
+    this.fetchWebapis();
+  },
+  methods: {
+    ...mapActions(useWebapiStore, ["fetchWebapis"]),
+    ...mapActions(useModalStore, ["openModal"]),
+    openCreateModal() {
+      this.openModal(
+        markRaw(defineAsyncComponent(() => import("@/components/admin/user/webapi/CreateWebapiModal.vue")))
+      );
+    },
+  },
+});
+</script>
diff --git a/src/views/admin/user/webapi/WebapiEdit.vue b/src/views/admin/user/webapi/WebapiEdit.vue
new file mode 100644
index 0000000..8eb85f7
--- /dev/null
+++ b/src/views/admin/user/webapi/WebapiEdit.vue
@@ -0,0 +1,126 @@
+<template>
+  <MainTemplate>
+    <template #headerInsert>
+      <RouterLink to="../" class="text-primary">zurück zur Liste (abbrechen)</RouterLink>
+    </template>
+    <template #topBar>
+      <div class="flex flex-row items-center justify-between pt-5 pb-3 px-7">
+        <h1 class="font-bold text-xl h-8">Webapi-Token {{ origin?.title }} - Daten bearbeiten</h1>
+      </div>
+    </template>
+    <template #main>
+      <Spinner v-if="loading == 'loading'" class="mx-auto" />
+      <p v-else-if="loading == 'failed'">laden fehlgeschlagen</p>
+      <form
+        v-else-if="webapi"
+        class="flex flex-col gap-4 py-2 w-full max-w-xl mx-auto"
+        @submit.prevent="triggerWebapiUpdate"
+      >
+        <div>
+          <label for="title">Bezeichnung</label>
+          <input type="text" id="title" required v-model="webapi.title" />
+        </div>
+        <div class="w-full">
+          <label for="expiry">Ablaufdatum (optional)</label>
+          <input type="date" id="expiry" step="1" v-model="webapi.expiry" />
+        </div>
+        <div class="flex flex-row justify-end gap-2">
+          <button primary-outline type="reset" class="!w-fit" :disabled="canSaveOrReset" @click="resetForm">
+            verwerfen
+          </button>
+          <button primary type="submit" class="!w-fit" :disabled="status == 'loading' || canSaveOrReset">
+            speichern
+          </button>
+          <Spinner v-if="status == 'loading'" class="my-auto" />
+          <SuccessCheckmark v-else-if="status?.status == 'success'" />
+          <FailureXMark v-else-if="status?.status == 'failed'" />
+        </div>
+      </form>
+    </template>
+  </MainTemplate>
+</template>
+
+<script setup lang="ts">
+import { defineComponent } from "vue";
+import { mapState, mapActions } from "pinia";
+import MainTemplate from "@/templates/Main.vue";
+import { useWebapiStore } from "@/stores/admin/user/webapi";
+import Spinner from "@/components/Spinner.vue";
+import SuccessCheckmark from "@/components/SuccessCheckmark.vue";
+import FailureXMark from "@/components/FailureXMark.vue";
+import { RouterLink } from "vue-router";
+import cloneDeep from "lodash.clonedeep";
+import isEqual from "lodash.isequal";
+import type { UpdateWebapiViewModel, WebapiViewModel } from "@/viewmodels/admin/user/webapi.models";
+import type { Update } from "vite/types/hmrPayload.js";
+</script>
+
+<script lang="ts">
+export default defineComponent({
+  props: {
+    id: String,
+  },
+  data() {
+    return {
+      loading: "loading" as "loading" | "fetched" | "failed",
+      status: null as null | "loading" | { status: "success" | "failed"; reason?: string },
+      origin: null as null | WebapiViewModel,
+      webapi: null as null | WebapiViewModel,
+      timeout: null as any,
+    };
+  },
+  computed: {
+    canSaveOrReset(): boolean {
+      return isEqual(this.origin, this.webapi);
+    },
+  },
+  mounted() {
+    this.fetchItem();
+  },
+  beforeUnmount() {
+    try {
+      clearTimeout(this.timeout);
+    } catch (error) {}
+  },
+  methods: {
+    ...mapActions(useWebapiStore, ["fetchWebapiById", "updateActiveWebapi"]),
+    resetForm() {
+      this.webapi = cloneDeep(this.origin);
+    },
+    fetchItem() {
+      this.fetchWebapiById(parseInt(this.id ?? ""))
+        .then((result) => {
+          this.webapi = result.data;
+          this.origin = cloneDeep(result.data);
+          this.loading = "fetched";
+        })
+        .catch((err) => {
+          this.loading = "failed";
+        });
+    },
+    triggerWebapiUpdate(e: any) {
+      if (this.webapi == null) return;
+      let formData = e.target.elements;
+      let updateWebapi: UpdateWebapiViewModel = {
+        title: formData.title.value,
+        expiry: formData.expiry.value,
+      };
+
+      this.status = "loading";
+      this.updateActiveWebapi(this.webapi.id, updateWebapi)
+        .then(() => {
+          this.fetchItem();
+          this.status = { status: "success" };
+        })
+        .catch((err) => {
+          this.status = { status: "failed" };
+        })
+        .finally(() => {
+          this.timeout = setTimeout(() => {
+            this.status = null;
+          }, 2000);
+        });
+    },
+  },
+});
+</script>
diff --git a/src/views/admin/user/webapi/WebapiEditPermission.vue b/src/views/admin/user/webapi/WebapiEditPermission.vue
new file mode 100644
index 0000000..44b6020
--- /dev/null
+++ b/src/views/admin/user/webapi/WebapiEditPermission.vue
@@ -0,0 +1,87 @@
+<template>
+  <MainTemplate>
+    <template #headerInsert>
+      <RouterLink to="../" class="text-primary">zurück zur Liste (abbrechen)</RouterLink>
+    </template>
+    <template #topBar>
+      <div class="flex flex-row items-center justify-between pt-5 pb-3 px-7">
+        <h1 class="font-bold text-xl h-8">Webapi-Token {{ webapi?.title }} - Berechtigungen bearbeiten</h1>
+      </div>
+    </template>
+    <template #main>
+      <Spinner v-if="loading == 'loading'" class="mx-auto" />
+      <p v-else-if="loading == 'failed'">laden fehlgeschlagen</p>
+      <Permission
+        v-else-if="webapi != null"
+        :permissions="webapi.permissions"
+        :status="status"
+        @savePermissions="triggerUpdate"
+      />
+    </template>
+  </MainTemplate>
+</template>
+
+<script setup lang="ts">
+import { defineComponent } from "vue";
+import { mapState, mapActions } from "pinia";
+import MainTemplate from "@/templates/Main.vue";
+import { useWebapiStore } from "@/stores/admin/user/webapi";
+import Permission from "@/components/admin/Permission.vue";
+import Spinner from "@/components/Spinner.vue";
+import type { PermissionObject } from "@/types/permissionTypes";
+import type { WebapiViewModel } from "@/viewmodels/admin/user/webapi.models";
+</script>
+
+<script lang="ts">
+export default defineComponent({
+  props: {
+    id: String,
+  },
+  data() {
+    return {
+      loading: "loading" as "loading" | "fetched" | "failed",
+      status: null as null | "loading" | { status: "success" | "failed"; reason?: string },
+      webapi: null as null | WebapiViewModel,
+      timeout: null as any,
+    };
+  },
+  mounted() {
+    this.fetchItem();
+  },
+  beforeUnmount() {
+    try {
+      clearTimeout(this.timeout);
+    } catch (error) {}
+  },
+  methods: {
+    ...mapActions(useWebapiStore, ["fetchWebapiById", "updateActiveWebapiPermissions"]),
+    fetchItem() {
+      this.fetchWebapiById(parseInt(this.id ?? ""))
+        .then((result) => {
+          this.webapi = result.data;
+          this.loading = "fetched";
+        })
+        .catch((err) => {
+          this.loading = "failed";
+        });
+    },
+    triggerUpdate(e: PermissionObject) {
+      if (this.webapi == null) return;
+      this.status = "loading";
+      this.updateActiveWebapiPermissions(this.webapi.id, e)
+        .then(() => {
+          this.fetchItem();
+          this.status = { status: "success" };
+        })
+        .catch((err) => {
+          this.status = { status: "failed" };
+        })
+        .finally(() => {
+          this.timeout = setTimeout(() => {
+            this.status = null;
+          }, 2000);
+        });
+    },
+  },
+});
+</script>