API keys and scopes

Where to find it

Settings → Connections → API Keys

✅ Common tasks

Create an API key

1. Click Create New API Key

2. Enter a key name and optional description

3. Optionally set a future expiration date

4. Select only the scopes the integration needs

5. Click Create Key, then copy and save the token

The full token is shown only once — copy it before closing the dialog, since it can't be viewed again.

Rotate a key safely

1. Create a new key with the same scopes and a new name

2. Copy and securely save the new token

3. Update the integration with the new token

4. Confirm the integration works

5. Revoke the old key from the API Keys list

Create the replacement before revoking the old key so the integration keeps working.

Review or revoke a key

1. Open the API Keys list to see name, scopes and masked key hint

2. Check last-used time, IP address and usage count

3. Revoke a key that's no longer needed or may be exposed

Revoking a key is permanent — you can't undo it or view its token again.

🔗 See also

• Public API, API keys and OAuth apps

• Authorising OAuth apps for your organisation

• Roles and permissions

• Connection health and renewal

• Cashfeed MCP connection