zulip/api_docs/api-keys.md

1.8 KiB

API keys

An API key is how a bot identifies itself to Zulip. For the official clients, such as the Python bindings, we recommend downloading a zuliprc file. This file contains an API key along with other necessary configuration values for using the Zulip API with a specific account on a Zulip server.

Get a bot's API key

{start_tabs}

{tab|desktop-web}

{settings_tab|your-bots}

  1. Click Active bots.

  2. Find your bot. The bot's API key is under API KEY.

{end_tabs}

!!! warn ""

Anyone with a bot's API key can impersonate the bot, so be careful with it!

Get your API key

{start_tabs}

{tab|desktop-web}

{settings_tab|account-and-privacy}

  1. Under API key, click Manage your API key.

  2. Enter your password, and click Get API key. If you don't know your password, click reset it and follow the instructions from there.

  3. Copy your API key.

{end_tabs}

!!! warn ""

Anyone with your API key can impersonate you, so be doubly careful with it.

Invalidate an API key

To invalidate an existing API key, you have to generate a new key.

Invalidate a bot's API key

{start_tabs}

{tab|desktop-web}

{settings_tab|your-bots}

  1. Click Active bots.

  2. Find your bot.

  3. Under API KEY, click the refresh () icon to the right of the bot's API key.

{end_tabs}

Invalidate your API key

{start_tabs}

{tab|desktop-web}

{settings_tab|account-and-privacy}

  1. Under API key, click Manage your API key.

  2. Enter your password, and click Get API key. If you don't know your password, click reset it and follow the instructions from there.

  3. Click Generate new API key

{end_tabs}