Creating, rotating and revoking API tokens

Creating, rotating and revoking API tokens

Under Settings → API access (admin) you can create a new key with a label and a permission matrix. The full secret is shown exactly once, right after the key is created or rotated — copy it then, it can’t be retrieved again. “Rotate” gives the key a new secret (the old one stops working immediately); “Revoke” permanently disables the key after a confirmation.