API Keys

Manage the API keys an integration uses to obtain access tokens. Each organisation-scoped key has an expiry and allowed scopes that limit the permissions its access tokens can request.

📄️List API keys

List the API keys created for an organisation.

📄️Create API key

Create an organisation-scoped API key with a name, expiration, and allowed scopes. The client secret is returned only when the key is created, so store it securely.

📄️Get API key

Retrieve a single API key by identifier.

📄️Update API key

Update the name, description, expiration, or allowed scopes of an API key. Omitted fields are left unchanged.

📄️Revoke API key

Revoke an API key so the integration can no longer use it to obtain access tokens.