API Keys
An APIKey is a key that allows programmatic access to your Site.
API keys confer all the permissions of the user who owns them unless the key uses a restricted permission set.
If an API key is created without a user owner, it is considered a site-wide API key. Site-wide API keys with the files_only permission set are restricted to file-user permissions and workspace scoping.
We recommend registering API keys to service users wherever possible and then using User or Group Permissions to restrict that API Key appropriately.
List API Keys
SDK Method
apikey.List()
Return Object
[]*ApiKey
Authorization Requirement
Not available to user API keys or sessions from users that are marked as Shared/Bot users.
ApiKeyListParams Fields
| Field | Description |
|---|---|
| UserId int64 | User ID. Provide a value of 0 to operate the current session's user. |
Additional Arguments
Show information about current API key. (Requires current API connection to be using an API key.)
SDK Method
apikey.FindCurrent
Return Object
ApiKey
Authorization Requirement
Available to all authenticated keys or sessions.
Show API Key
SDK Method
apikey.Find()
Return Object
ApiKey
Authorization Requirement
Not available to user API keys or sessions from users that are marked as Shared/Bot users.
ApiKeyFindParams Fields
| Field | Description |
|---|---|
| Id int64 Required | Api Key ID. |
Create API Key
SDK Method
apikey.Create()
Return Object
ApiKey
Authorization Requirement
Available to all authenticated keys or sessions.
ApiKeyCreateParams Fields
| Field | Default | Description |
|---|---|---|
| UserId int64 | User ID. Provide a value of 0 to operate the current session's user. | |
| Description string | User-supplied description of API key. | |
| ExpiresAt string | API Key expiration date | |
| Name string Required | "" | Internal name for the API Key. For your use. |
| AwsStyleCredentials boolean | false | If true, this API key will be usable with AWS-compatible endpoints, such as our Inbound S3-compatible endpoint. |
| Path string | Folder path restriction for office_integration permission set API keys. | |
| PermissionSet string | "full" | Permissions for this API Key. Keys with the desktop_app permission set only have the ability to do the functions provided in our Desktop App (File and Share Link operations). Keys with the office_integration permission set are auto generated, and automatically expire, to allow users to interact with office integration platforms. Keys with the files_only permission set can perform file operations as a full-access file user in the key's workspace scope, but cannot use site admin, workspace admin, folder admin, group admin, partner admin, or billing privileges from the owning user.Possible values: none, full, desktop_app, sync_app, office_integration, mobile_app, files_only |
| WorkspaceId int64 | 0 | Workspace ID for this API Key. 0 means the default workspace. |
Update current API key. (Requires current API connection to be using an API key.)
SDK Method
apikey.UpdateCurrent()
Return Object
ApiKey
Authorization Requirement
Available to all authenticated keys or sessions.
ApiKeyUpdateCurrentParams Fields
| Field | Description |
|---|---|
| ExpiresAt string | API Key expiration date |
| Name string | Internal name for the API Key. For your use. |
| PermissionSet string | Permissions for this API Key. Keys with the desktop_app permission set only have the ability to do the functions provided in our Desktop App (File and Share Link operations). Keys with the office_integration permission set are auto generated, and automatically expire, to allow users to interact with office integration platforms. Keys with the files_only permission set can perform file operations as a full-access file user in the key's workspace scope, but cannot use site admin, workspace admin, folder admin, group admin, partner admin, or billing privileges from the owning user.Possible values: none, full, desktop_app, sync_app, office_integration, mobile_app, files_only |
Update API Key
SDK Method
apikey.Update()
Return Object
ApiKey
Authorization Requirement
Not available to user API keys or sessions from users that are marked as Shared/Bot users.
ApiKeyUpdateParams Fields
| Field | Description |
|---|---|
| Id int64 Required | Api Key ID. |
| Description string | User-supplied description of API key. |
| ExpiresAt string | API Key expiration date |
| Name string | Internal name for the API Key. For your use. |
Delete current API key. (Requires current API connection to be using an API key.)
SDK Method
apikey.DeleteCurrent
Return Object
No return value.
Authorization Requirement
Available to all authenticated keys or sessions.
Delete API Key
SDK Method
apikey.Delete()
Return Object
No return value.
Authorization Requirement
Not available to user API keys or sessions from users that are marked as Shared/Bot users.
ApiKeyDeleteParams Fields
| Field | Description |
|---|---|
| Id int64 Required | Api Key ID. |
The ApiKey Object
Some of the methods above return a ApiKey object. The attributes of this object are listed below.
| Attribute | Description |
|---|---|
| Id int64 | API Key ID |
| DescriptiveLabel string | Unique label that describes this API key. Useful for external systems where you may have API keys from multiple accounts and want a human-readable label for each key. |
| Description string | User-supplied description of API key. |
| CreatedAt date-time | Time which API Key was created |
| ExpiresAt date-time | API Key expiration date |
| Key string | API Key actual key string |
| AwsStyleCredentials boolean | If true, this API key will be usable with AWS-compatible endpoints, such as our Inbound S3-compatible endpoint. |
| AwsAccessKeyId string | AWS Access Key ID to use with AWS-compatible endpoints, such as our Inbound S3-compatible endpoint. |
| AwsSecretKey string | AWS Secret Key to use with AWS-compatible endpoints, such as our Inbound S3-compatible endpoint. |
| LastUseAt date-time | API Key last used - note this value is only updated once per 3 hour period, so the 'actual' time of last use may be up to 3 hours later than this timestamp. |
| Name string | Internal name for the API Key. For your use. |
| PermissionSet string | Permissions for this API Key. Keys with the desktop_app permission set only have the ability to do the functions provided in our Desktop App (File and Share Link operations). Keys with the office_integration permission set are auto generated, and automatically expire, to allow users to interact with office integration platforms. Keys with the files_only permission set can perform file operations as a full-access file user in the key's workspace scope, but cannot use site admin, workspace admin, folder admin, group admin, partner admin, or billing privileges from the owning user.Possible values: none, full, desktop_app, sync_app, office_integration, mobile_app, files_only |
| Platform string | If this API key represents a Desktop app, what platform was it created on? |
| SiteId int64 | Site ID |
| SiteName string | Site Name |
| Url string | URL for API host. |
| UserId int64 | User ID for the owner of this API Key. May be blank for Site-wide API Keys. |
| WorkspaceId int64 | Workspace ID for this API Key. 0 means the default workspace. |