API Keys

Overview

API keys let your users call Synthreo programmatically. As an administrator you decide who may create keys, and you can revoke any active key. Enablement is opt-in and off by default: a user cannot create a key until you enable them.

These controls appear in two places, and work the same in both:

• Your organization - in Settings, under “API Keys”.
• A child customer - on the customer’s API Keys tab. See Adding a New Customer.

---

Enable who can create keys

The top of the card is your organization’s roster, with an API keys toggle beside each user. Turn a user’s toggle on and they can mint their own keys inside Threo; leave it off and they cannot. Turning it back off stops them creating new keys.

With no users to show, the roster reads “No users in this organization.”

---

Review and revoke keys

Below the roster, keys are grouped by owner, each showing Label, Status, Last used, Expires, and Created. A search box filters by owner or key label.

Two buttons above the table decide which keys you are looking at:

• Active - the default. Only keys that are still usable.
• All - every key on record, including revoked and expired ones.

The heading names the current view and its count, for example “Active keys (12)” or “All keys (31)”.

Caution

The default view hides revoked and expired keys. If you are auditing who has ever held a key, switch to All first - an empty or short Active list is not the whole history.

Each key has a Revoke action. Revocation takes effect immediately, so use it the moment a key is no longer needed or may be exposed.

---

Related

• Settings - where your organization’s API key controls live
• Adding a New Customer - the per-customer API Keys tab