Connect tools with an API key
Who it’s for: Managers and authorized integration owners
Where: Settings → API keys
Before you start: Access to Settings and permission to manage API keys.
- Open API keys in Settings and create a key with a recognizable name.
- Select only the access the tool needs. Read-only access is a useful starting point for a reporting tool.
- Copy the secret when it is displayed and store it in the connecting tool’s credential settings.
- Configure the tool to use the Sales API reference and bearer authentication.
- Verify the connection with a read operation before using it to update records.
- Use Rotate if the secret is lost or needs replacement; use Revoke when the connection is no longer needed.
You’ll know it worked when…
Section titled “You’ll know it worked when…”The tool can read the intended workspace with the chosen access, and the key is visible in Settings.
Notes & limits
Section titled “Notes & limits”- The secret is displayed once. Do not put it in a chat message, screenshot or support request.
- A key acts as its creator and cannot exceed that person’s access. It cannot manage users or other keys.
- Rotation requires updating the secret in the connecting tool. Revocation stops future requests.
- See Connect an assistant with MCP for browser-based authorization.