API keys

An API key lets your own code generate and read your Library through the Shotz API. Each key belongs to one workspace and spends that workspace’s credits.

Making a key

1. Open Settings → API.
2. Choose New key.
3. Give it a name so you know where it’s used, such as the app or server it’s for, and choose Make key.
4. Copy the key straight away. It starts sk_live_, and it’s shown only this once: Shotz keeps a scrambled copy that can check a key but can’t show it again.

If you lose a key, make a new one and revoke the old one.

Your keys

Each key is listed by name, with the start and end of the key and when it was last used (Not used yet until then). The last-used date is updated about once an hour.

Revoking a key

Choose Revoke next to the key and confirm. Anything using it stops working straight away.

Who can do what

• Owners make and revoke keys.
• Editors can see the keys but not make or revoke them.
• Commenters don’t see the keys.

A key works only while the person who made it is still an owner or editor of the workspace. If they leave or become a commenter, their keys stop working; make new ones. What a key generates counts against its maker’s monthly credit limit, if they have one: see Set a credit limit for someone.

Keep keys secret, like a password. Anyone with one can spend the workspace’s credits.