diff --git a/src/js/client.js b/src/js/client.js
index 1cd7cdb7f..7c2438679 100644
--- a/src/js/client.js
+++ b/src/js/client.js
@@ -1680,9 +1680,10 @@ angular.module('Application').service('Client', ['$http', '$interval', '$timeout
         });
     };
 
-    Client.prototype.createToken = function (name, callback) {
+    Client.prototype.createToken = function (name, scope, callback) {
         var data = {
-            name: name
+            name: name,
+            scope: scope
         };
 
         post('/api/v1/tokens', data, null, function (error, data, status) {
diff --git a/src/views/profile.html b/src/views/profile.html
index 02c701d59..e6648fde9 100644
--- a/src/views/profile.html
+++ b/src/views/profile.html
@@ -334,6 +334,12 @@
                 <input type="text" class="form-control" id="inputApiTokenName" ng-model="tokens.add.name" name="name" required autofocus>
               </div>
 
+              <div class="checkbox">
+                <label>
+                  <input type="checkbox" ng-model="tokens.add.readWrite">Read and write API access</input>
+                </label>
+              </div>
+
               <input class="ng-hide" type="submit" ng-disabled="apiTokenAddForm.$invalid"/>
             </form>
           </div>
diff --git a/src/views/profile.js b/src/views/profile.js
index 9d741f703..063cadc09 100644
--- a/src/views/profile.js
+++ b/src/views/profile.js
@@ -662,10 +662,12 @@ angular.module('Application').controller('ProfileController', ['$scope', '$trans
             error: null,
             name: '',
             accessToken: '',
+            readWrite: true,
 
             show: function () {
                 $scope.tokens.add.name = '';
                 $scope.tokens.add.accessToken = '';
+                $scope.tokens.add.readWrite = true;
                 $scope.tokens.add.busy = false;
                 $scope.tokens.add.error = null;
                 $scope.apiTokenAddForm.name.$setPristine();
@@ -676,7 +678,9 @@ angular.module('Application').controller('ProfileController', ['$scope', '$trans
             submit: function () {
                 $scope.tokens.add.busy = true;
 
-                Client.createToken($scope.tokens.add.name, function (error, result) {
+                var scope = { '*': $scope.tokens.add.readWrite ? 'rw' : 'r' };
+
+                Client.createToken($scope.tokens.add.name, scope, function (error, result) {
                     if (error) {
                         if (error.statusCode === 400) {
                             $scope.tokens.add.error = error.message;