This article outlines the steps to create an API token for integrations, ensuring proper permissions are set for specific use cases. See video walkthrough here, and below is a step by step version.
Step 1: Access the API Token Creation Section 0:02
Navigate to the API token creation section in your application.
Select 'Create Token' and give it a name (good practise to name it relevant to where it will be used, i.e. zapier)
Step 2: Choose Expiry date (Optional) 0:11
Decide whether to add an expiry date or not. If you add one, the API key will no longer work after this date and you will need to create a new one.
Step 3: Set Permissions for the API Token 0:43
Review the permissions section where you can define what the API token can access.
You have two options:
Select All: Grants access to all items in your account.
Granular Permissions: Choose specific items (e.g., only documents) by unticking the other options.
Step 4: Save the API Token 1:06
After setting the desired permissions, click 'Save'.
Step 5: Copy the API Key 1:20
Locate the API key in the green header, displayed after saving.
Copy the API key and save it in a secure notebook or document.
Step 6: Use the API Key in Integrations 1:32
Import the copied API key into your integration tool (e.g., Zapier) as needed.
Ensure that you only grant permissions that are necessary for the integration to minimise security risks.
Keep the API key secure and do not share it publicly.
If unsure about permissions, start with 'Select All' and refine later based on specific needs.
Maintain a secure document for all API keys to streamline future integrations.