API Access Keys

Create and manage OAuth 2.0 API keys that allow external systems to authenticate against the TilliT API.

API Access Keys allow tenant admins to generate credentials for external systems to authenticate against the TilliT API without requiring a user account. Keys are managed from Account Settings.

Overview

Each API access key has a name, one or more scopes, an expiration date, and an enabled/disabled status. The client secret is shown once immediately after creation — it cannot be retrieved again, so it must be copied and stored securely at that time.

Navigate to Account Settings > API Access Keys by clicking the account icon in the top-right corner.

Create a Key

1. Click New API key.

2. Fill in the required fields (see Fields below).

3. Click Create.

1. Copy the Key ID and Secret from the confirmation card, then click Done.

The client secret is only shown once. Store it securely before clicking Done — it cannot be retrieved after this step.

The new key appears in the list with its name, Key ID, expiration date, and enabled status.

Fields

Field	Description
Name*	A descriptive label for the key.
Scope*	The permissions granted to the key (e.g. Data Read, Data Write).
Expiration*	The date after which the key will no longer be valid.

* Required field

Enable or Disable a Key

Toggle the switch on any key in the list to enable or disable it. The change takes effect immediately.

Delete a Key

Click the ✕ button on a key and confirm the dialog. The key is permanently removed and can no longer be used to authenticate.