API
API tokens
Tokens for scripts and CI, each with only the access it needs.
Give every script and CI system its own token from Settings → API tokens, instead of sharing the recovery token. Each one has a name, shows when it was last used, and can be revoked on its own.
| Access | Can |
|---|---|
| Read only | Read keys, activity and the audit log. Any request that changes something is refused. |
| Admin | Everything an admin can do: create keys, change rules, rotate, kill and revive. |
| Full access | Everything the owner can do through the API. |
API tokens work only with the management API. They cannot sign in to the dashboard. An account can have up to 25.
Still have a question?
We read every email, usually within a day.