API Keys
Workspace owners can create and manage API keys from user settings under Development.
API keys are for trusted integrations owned by the workspace. Treat them like passwords.
Create a key
- Open User Settings.
- Go to Development.
- Open the API key area.
- Create a key for the workspace you want to integrate.
- Store the generated key securely before closing the creation flow.
Do not share API keys in public repositories, frontend code, screenshots, or support tickets.
Usage in the app
The app shows current API-key usage next to each registered workspace key. You do not need to paste the key back into the app to see usage; your signed-in owner session is enough.
Permissions and usage
API keys use the key owner's workspace permissions. If the owner cannot manage a task, ticket, event, or ticket customer in the app, calls made with that key cannot do it either.
Transferring workspace ownership automatically revokes every API key registered for that workspace. The new owner must create replacement keys for integrations that should continue running.
If a key leaks, remove it from the registered workspace list and create a new one.
Creating, rotating, and removing a key is concurrency-safe. If two browser tabs submit the same action together, only one creation or rotation succeeds, and removing a key revokes every credential associated with that workspace entry.