OmexaOS
Your workspace

API keys

Give an integration a key with the role you choose in each product. It trades the key for a short-lived token, and you can revoke it at any time.

Let your other systems work in OmexaOS, within limits you set.

  • A role per product, so a key can do exactly what you allow
  • Traded for a token that lasts half an hour
  • Shown once; only a hash is stored
  • Revoke at any time, and see when each key was last used

Least access by default

A key has no access until you give it a role in a product, and it can never manage people, roles or other keys.

Built to be lost safely

Tokens expire in thirty minutes, keys can be given an expiry, and revoking one stops it at once.

Never treated as a colleague

A key works through the API but never appears in staff lists or receives leads from routing.