Skip to main content

API Key Management

Developer

API keys are the credentials used to authenticate requests to the DataCentral REST API. They are managed by a Tenant Administrator and scoped to a specific Tenant.


1. Creating an API Key

  1. Navigate to Administration > Users.
  2. Click Manage API Keys. (If not visible, check features enabled for tenant and/or permissions for the logged in user)
  3. Click Create to generate a new API key.

2. Key Management Options

Secrets

Each API key can have up to two active secrets at once. This allows for secret rotation without downtime — generate a new secret, update your application to use it, then invalidate the old one.

Expiration

Secrets can be assigned an expiration date, after which they are automatically invalidated.

Disabling

An API key can be disabled at any time to immediately revoke access without deleting it.

Roles

Roles can be assigned directly to an API key. The key is then treated as a regular user with those roles, meaning all RBAC rules apply to every request made with it.