API keys let you connect Simplesat to your tools.
Create one key per integration so you can rotate or revoke access without breaking everything.
Create an API key
Go to Settings → API keys.
Select Create API key.
Enter a key name.
Example: “Data warehouse export”
Choose an access level.
Full access grants all current and future scopes, including new scopes we add later.
Custom grants only the scopes you select. New scopes are not included automatically.

Select Create API key.
Copy the key and store it somewhere safe.
The full API key secret is shown only once.
If you lose it, you must create a new key.
Edit an API key
You can edit an API key to change its:
Key name
Permissions
Changes apply immediately.
The secret key is never shown again.'
Understand permissions (scopes)
Each API key has scopes that control what it can do.
In the API keys table, the Permissions column shows whether a key has Full access or Custom access.
Hover over Full access or Custom to see the detailed scopes.

Delete an API key
Deleting an API key:
Immediately invalidates the API key.
Cannot be undone.

When you delete a key, any applications using it will no longer be able to access your workspace.
Who can manage keys?
Only Owners and Admins can create, edit, or delete API keys.
Legacy account key
If your workspace existed before the new API key management, it may still have a legacy account key from the previous system.
The legacy account key has full access.
The legacy account key is no longer shown in the app.
If you need to view or revoke a legacy account key, contact support.

Best practices
Use one key per integration so you can rotate or revoke access without breaking everything.
Use clear names so it is obvious what the key is for.
Format: Tool + environment + purpose
Examples: “Postman (testing)”, “Zapier (production)”, “Data warehouse export”
Store keys in a password manager or secrets manager. Do not save them in chat threads or spreadsheets.
Rotate keys when needed:
Create a new key.
Update the integration to use the new key.
Delete the old key.
Security notes
The full API key secret is shown only once.
For security, Simplesat stores only a hashed version of each key.
FAQ
I cannot see the API keys management page.
Only Owners and Admins have access to the API keys management page.
I lost my API key secret.
Create a new API key. Existing API keys cannot be recovered.
My integration stopped working after deleting a key.
Update the integration to use a different active API key.

