API Keys

An APIKey is a key that allows programmatic access to your Site.

API keys confer all the permissions of the user who owns them unless the key uses a restricted permission set. If an API key is created without a user owner, it is considered a site-wide API key. Site-wide API keys with the files_only permission set are restricted to file-user permissions and workspace scoping.

We recommend registering API keys to service users wherever possible and then using User or Group Permissions to restrict that API Key appropriately.

List API Keys

Command

files-cli api-keys list

Output

Outputs a list of ApiKey objects according to the output format.

Authorization Requirement

Not available to user API keys or sessions from users that are marked as Shared/Bot users.

Flags

FlagDescription
--user-id=
int64		User ID. Provide a value of 0 to operate the current session's user.

Additional Arguments

Example Request

files-cli api-keys list \
  --user-id=1

Show information about current API key. (Requires current API connection to be using an API key.)

Command

files-cli api-keys find-current

Output

Outputs a ApiKey object according to the output format.

Authorization Requirement

Available to all authenticated keys or sessions.

Example Request

files-cli api-keys find-current

Show API Key

Command

files-cli api-keys find

Output

Outputs a ApiKey object according to the output format.

Authorization Requirement

Not available to user API keys or sessions from users that are marked as Shared/Bot users.

Flags

FlagDescription
--id=
int64
Required		Api Key ID.

Example Request

files-cli api-keys find \
  --id=1

Create API Key

Command

files-cli api-keys create

Output

Outputs a ApiKey object according to the output format.

Authorization Requirement

Available to all authenticated keys or sessions.

Flags

FlagDefaultDescription
--user-id=
int64		User ID. Provide a value of 0 to operate the current session's user.
--description=
string		User-supplied description of API key.
--expires-at=
string		API Key expiration date
--name=
string
Required		""Internal name for the API Key. For your use.
--aws-style-credentials
boolean		falseIf true, this API key will be usable with AWS-compatible endpoints, such as our Inbound S3-compatible endpoint.
--path=
string		Folder path restriction for office_integration permission set API keys.
--permission-set=
string		"full"Permissions for this API Key. Keys with the desktop_app permission set only have the ability to do the functions provided in our Desktop App (File and Share Link operations). Keys with the office_integration permission set are auto generated, and automatically expire, to allow users to interact with office integration platforms. Keys with the files_only permission set can perform file operations as a full-access file user in the key's workspace scope, but cannot use site admin, workspace admin, folder admin, group admin, partner admin, or billing privileges from the owning user.
Possible values: none, full, desktop_app, sync_app, office_integration, mobile_app, files_only
--workspace-id=
int64		0Workspace ID for this API Key. 0 means the default workspace.

Example Request

files-cli api-keys create \
  --name="My Main API Key"

Update current API key. (Requires current API connection to be using an API key.)

Command

files-cli api-keys update-current

Output

Outputs a ApiKey object according to the output format.

Authorization Requirement

Available to all authenticated keys or sessions.

Flags

FlagDescription
--expires-at=
string		API Key expiration date
--name=
string		Internal name for the API Key. For your use.
--permission-set=
string		Permissions for this API Key. Keys with the desktop_app permission set only have the ability to do the functions provided in our Desktop App (File and Share Link operations). Keys with the office_integration permission set are auto generated, and automatically expire, to allow users to interact with office integration platforms. Keys with the files_only permission set can perform file operations as a full-access file user in the key's workspace scope, but cannot use site admin, workspace admin, folder admin, group admin, partner admin, or billing privileges from the owning user.
Possible values: none, full, desktop_app, sync_app, office_integration, mobile_app, files_only

Example Request

files-cli api-keys update-current \
  --expires-at="2000-01-01T01:00:00Z"

Update API Key

Command

files-cli api-keys update

Output

Outputs a ApiKey object according to the output format.

Authorization Requirement

Not available to user API keys or sessions from users that are marked as Shared/Bot users.

Flags

FlagDescription
--id=
int64
Required		Api Key ID.
--description=
string		User-supplied description of API key.
--expires-at=
string		API Key expiration date
--name=
string		Internal name for the API Key. For your use.

Example Request

files-cli api-keys update \
  --id=1 \
  --description="example"

Delete current API key. (Requires current API connection to be using an API key.)

Command

files-cli api-keys delete-current

Output

No output is returned.

Authorization Requirement

Available to all authenticated keys or sessions.

Example Request

files-cli api-keys delete-current

Delete API Key

Command

files-cli api-keys delete

Output

No output is returned.

Authorization Requirement

Not available to user API keys or sessions from users that are marked as Shared/Bot users.

Flags

FlagDescription
--id=
int64
Required		Api Key ID.

Example Request

files-cli api-keys delete \
  --id=1

The ApiKey Object

Some of the commands above return a ApiKey object. The attributes of this object are listed below.

AttributeDescription
id
int64		API Key ID
descriptive_label
string		Unique label that describes this API key. Useful for external systems where you may have API keys from multiple accounts and want a human-readable label for each key.
description
string		User-supplied description of API key.
created_at
date-time		Time which API Key was created
expires_at
date-time		API Key expiration date
key
string		API Key actual key string
aws_style_credentials
boolean		If true, this API key will be usable with AWS-compatible endpoints, such as our Inbound S3-compatible endpoint.
aws_access_key_id
string		AWS Access Key ID to use with AWS-compatible endpoints, such as our Inbound S3-compatible endpoint.
aws_secret_key
string		AWS Secret Key to use with AWS-compatible endpoints, such as our Inbound S3-compatible endpoint.
last_use_at
date-time		API Key last used - note this value is only updated once per 3 hour period, so the 'actual' time of last use may be up to 3 hours later than this timestamp.
name
string		Internal name for the API Key. For your use.
permission_set
string		Permissions for this API Key. Keys with the desktop_app permission set only have the ability to do the functions provided in our Desktop App (File and Share Link operations). Keys with the office_integration permission set are auto generated, and automatically expire, to allow users to interact with office integration platforms. Keys with the files_only permission set can perform file operations as a full-access file user in the key's workspace scope, but cannot use site admin, workspace admin, folder admin, group admin, partner admin, or billing privileges from the owning user.
Possible values: none, full, desktop_app, sync_app, office_integration, mobile_app, files_only
platform
string		If this API key represents a Desktop app, what platform was it created on?
site_id
int64		Site ID
site_name
string		Site Name
url
string		URL for API host.
user_id
int64		User ID for the owner of this API Key. May be blank for Site-wide API Keys.
workspace_id
int64		Workspace ID for this API Key. 0 means the default workspace.