diff --git a/README.rst b/README.rst
index fd88aa1..78b4c76 100644
--- a/README.rst
+++ b/README.rst
@@ -44,3 +44,5 @@ Then set it in your terminal, replacing %Project_Token% with your own token:
 Next, simply run the Codacy reporter. It will find the current commit and send all details to your project dashboard:
 
 ``python-codacy-coverage -r coverage.xml``
+
+Note: You should keep your API token well **protected**, as it grants owner permissions to your projects.