Managing API Clients

Client List

View all your API clients:

1. Navigate to Settings → API Clients
2. See a list of all created clients
3. View client status (Active/Inactive)
4. See last used date and IP address
5. View total request count
6. Check rate limit usage

Client Details

View detailed information about a client:

• Basic Information: Name, description, creation date
• Credentials: Client ID (secret is hidden after creation)
• Usage Statistics: Total requests, last used date, last used IP
• Rate Limits: Current rate limit settings
• Scopes: Configured permissions and scopes
• Status: Active or inactive status
• Expiration: Expiration date if set

Usage Statistics

Monitor your API client usage:

• Total Requests: Total number of API requests made
• Last Used: Timestamp of last API request
• Last Used IP: IP address of last request
• Request History: Detailed request logs (if enabled)
• Error Rate: Percentage of failed requests
• Response Times: Average response times

Use statistics to monitor usage patterns and identify potential issues.

Rate Limits

Configure and monitor rate limits:

• Per Minute: Maximum requests per minute (default: 60)
• Per Day: Maximum requests per day (default: 10,000)
• Burst Limit: Short burst allowance
• Current Usage: Real-time rate limit usage
• Reset Times: When rate limits reset

Adjust rate limits based on your application's needs. Contact support for higher limits.

Client Rotation

Rotate client secrets for security:

1. Open the API client you want to rotate
2. Click "Rotate Secret"
3. Confirm the rotation
4. Save the new client secret immediately
5. Update your application with the new secret
6. Old secret is immediately invalidated

Warning: Rotating a secret will invalidate all existing tokens and sessions. Update your application immediately to avoid service interruption.

Deactivating Clients

Deactivate API clients when no longer needed:

1. Open the API client
2. Click "Deactivate" or toggle the status
3. Confirm deactivation
4. Client is immediately disabled
5. All tokens and sessions are invalidated

Deactivated clients can be reactivated later if needed.