Where to find it
Settings → Connections → API Keys (for API keys); the link an app gives you opens the OAuth consent screen
✅ Common tasks
Create an API key
Open Settings → Connections → API Keys
Choose Create New API Key and enter a name
Optionally add a description and an expiration date
Select at least one permission scope
Copy and store the token immediately — it's shown only once
Use a separate, clearly named key per integration so you can revoke one without breaking others.
Review or revoke a key
Open Settings → Connections → API Keys
Check each key's scopes, expiration, last use and usage count
Create and store a replacement key before revoking one still in use
Revoke keys that are unused, expired, or may be exposed
Only an Owner or Admin can create or revoke API keys, and you can have up to 20 active at once.
Authorise a third-party OAuth app
Open the authorisation link the app provides and sign in
Check the app name and requested permissions look right
Choose All organisations, or select specific ones (at least one is required)
Click Approve to connect, or Deny to cancel
Choosing All organisations also covers organisations you join later, not just current ones.