API clients
Manage integration access separately from human sign-in.
Step by step
- Select a client and check its status, expiry, credential/restriction versions and restrictions. This API does not expose a current assigned-role list; use the exact approved role identifiers for explicit assignments.
- Restriction updates replace the entire set. Check the current version and include every existing restriction you need to retain. An unchecked optional array is omitted and resets that bound to unrestricted; an included empty array denies all permissions or all IP addresses. Current assigned-role permissions still apply.
- If creating or rotating a secret, save the one-time response in appropriate secret storage immediately after success.
- Have the responsible operator update the integration configuration. Do not copy the secret into messages, labels or logs.