diff --git a/components/x-teaser-list/readme.md b/components/x-teaser-list/readme.md
index dd9aeeda3..116133767 100644
--- a/components/x-teaser-list/readme.md
+++ b/components/x-teaser-list/readme.md
@@ -33,9 +33,10 @@ All `x-` components are designed to be compatible with a variety of runtimes, no
 
 [jsx-wtf]: https://jasonformat.com/wtf-is-jsx/
 
-### Properties
+### Props
 
 Feature           | Type    | Notes
 ------------------|---------|----------------------------
 `items`           | Array   | Array of objects representing content items in Teaser format.
 `showSaveButtons` | Boolean | Default = true. Whether to show the save buttons.
+`csrfToken`       | String  | Cross-site Request Forgery token. Required if save buttons are shown.
diff --git a/components/x-teaser-list/src/TeaserList.jsx b/components/x-teaser-list/src/TeaserList.jsx
index 836c47129..84154b599 100644
--- a/components/x-teaser-list/src/TeaserList.jsx
+++ b/components/x-teaser-list/src/TeaserList.jsx
@@ -4,7 +4,7 @@ import { Teaser, presets } from '@financial-times/x-teaser';
 import classNames from 'classnames';
 import styles from './TeaserList.scss';
 
-const TeaserList = ({ items = [], showSaveButtons = true }) => (
+const TeaserList = ({ items = [], showSaveButtons = true, csrfToken = null }) => (
 	<ul className={classNames(styles.list)}>
 	{items.map(item => {
 		return (
@@ -24,7 +24,7 @@ const TeaserList = ({ items = [], showSaveButtons = true }) => (
 						id={`${item.id}-save-button`}
 						contentId={item.id}
 						contentTitle={item.title}
-						csrfToken="dummy-token"
+						csrfToken={csrfToken}
 						saved={item.saved || false}
 					/>
 				</div>}
diff --git a/components/x-teaser-list/stories/with-save-buttons.js b/components/x-teaser-list/stories/with-save-buttons.js
index 5b05e976a..8a4d60abf 100644
--- a/components/x-teaser-list/stories/with-save-buttons.js
+++ b/components/x-teaser-list/stories/with-save-buttons.js
@@ -1,7 +1,8 @@
 exports.title = 'With save buttons';
 
 exports.data = {
-	items: require('./content-items.json')
+	items: require('./content-items.json'),
+	csrfToken: 'dummy-token'
 };
 
 // This reference is only required for hot module loading in development