/ /

Mastering API Keys: Creation, Management, and Security

Updated 4 months ago

What is an API Key?

An API key is a unique identifier used to authenticate requests between a user and a service. It acts as a security token, allowing applications to communicate securely with Kintsugi's services. API keys are crucial for controlling access, preventing unauthorized usage, and ensuring data integrity.


Why Do I Need an API Key?

API Keys serve several important functions:

  • Authentication & Security: Ensure only authorized users can access Kintsugi’s services.

  • Access Control: Restrict or grant different levels of access to applications.

  • Monitoring & Usage Tracking: Keep track of API usage for security and performance insights.

  • Automation: Enable seamless integration with other tools and services.


Accessing API Key Management

1. Go to Account Settings

Log in to your Kintsugi account.

kintsugi login.png

2. Navigate to the Configuration tab

On the left side of the app screen, click on the Configuration tab

configuration button.png

3. Access the API Key section

3.1 Click your name at the bottom and select Account.

name_account.png

3.2. In the next page, click Organization API Keys.

organization API keys.png

3.3. You will see the available API keys in the next page.

list of api keys.png


Creating and Deleting API Keys

How to Create an API Key

  1. Click the "+ New API key" button to proceed.

new API Key.png

  1. Fill the form API Key Name (optional) and select the expiration date for your API (two weeks, one month, three months, six months, one year or never). Then click, the Create button.

API form.png

  1. A new API will be generated and you should copy it because you will not be able to view it again.

new organization API key generated.png

Manage your API Keys

In the same page, you can view a list of your API keys and edit the name or revoke it.

To edit an API Key

  1. Scroll to the right and click the three dots. Then, click Edit name.

edit api name.png

  1. Fill the form with the new API name and click the Save button.

edit api name save button.png

  1. A confirmation message will appear in the bottom-right side of your screen.

update api key name message confirmation.png

To Delete an API Key

  1. Scroll to the right and click the three dots. Then, click Revoke API key.

revoke api key.png

  1. A pop-up will appear asking you if you want to revoke the API key because it cannot be undone. Click the Revoke key button.

revoke api button.png

  1. A confirmation message will appear at the bottom-right side of your screen.

revoke api key message confirmation.png

Note: API keys are tied to an organization and stay active until either the key or the organization is deleted. You can create multiple keys for periodic rotation.


Important Notes

API keys are associated with an organization and remain active until they are manually deleted or the organization itself is removed.

You can generate multiple API keys, allowing you to rotate them periodically for security purposes.

Keep your API key private and do not share it with unauthorized users to prevent misuse.

By following the steps, you can securely manage API keys and ensure controlled access to Kintsugi’s products and services.


Need Help?

For further concerns, we're always here to help. If you can't find the answer you're looking for, just reach out to us using the chat in the bottom right corner of your screen.

Was this article helpful?