> ## Documentation Index
> Fetch the complete documentation index at: https://docs.awardforce.com/llms.txt
> Use this file to discover all available pages before exploring further.

# API keys management

> Generate, edit, and revoke Award Force API keys.

## API key scopes

API scopes allow you to restrict access for third parties using an API key. Use a scope to protect your and your entrants' data by limiting what third parties can access.

You can apply one of the following scopes to any API key:

* **Read only** - Use for `GET` operations, restricted to viewing data associated with the endpoint.
* **Read / Write** - Use for `GET`, `POST`, `PUT`, `PATCH`, and `DELETE` operations, covering create, update, and delete actions on data associated with the endpoint (set by default).

## Manage API keys

### Generate a new API key

<Steps>
  <Step title="Log in to the Award Force dashboard" />

  <Step title="Generate a new API key">
    Navigate to *Settings > Integrations > API Keys*, then click on **Generate API Key**:

    <img src="https://mintcdn.com/creativeforce/WaCq_udETwNmiRAP/images/authentication/generate-api-keys.png?fit=max&auto=format&n=WaCq_udETwNmiRAP&q=85&s=fc9376c2b74e94440a4678450688a82a" alt="Generate API key in dashboard" width="1516" height="1028" data-path="/images/authentication/generate-api-keys.png" data-path="images/authentication/generate-api-keys.png" />
  </Step>

  <Step title="Give your API key a name or purpose">
    Use a clear name or purpose so you can identify which integration a key belongs to later, especially when managing several keys.

    <img src="https://mintcdn.com/creativeforce/WaCq_udETwNmiRAP/images/authentication/api-key-name-purpose.png?fit=max&auto=format&n=WaCq_udETwNmiRAP&q=85&s=646d6922066ce27b1c44ff777ece1efa" alt="Add API key name and purpose" width="1516" height="1028" data-path="/images/authentication/api-key-name-purpose.png" data-path="images/authentication/api-key-name-purpose.png" />
  </Step>

  <Step title="Define the scope of the API key">
    Select **Read only** for `GET` operations only, or **Read / Write** for full access (`GET`, `POST`, `PUT`, `PATCH`, `DELETE`).
  </Step>

  <Step title="Specify notification email addresses if needed. Separate each address with a comma (,) or semicolon (;)" />

  <Step title="Save your changes" />
</Steps>

### Update an existing API key

To update an existing API key, go to *Settings > Integrations > API Keys*, then click on the name of API keyname, or open the overflow action menu and click **Edit**.

<img src="https://mintcdn.com/creativeforce/WaCq_udETwNmiRAP/images/authentication/update-api-keys.png?fit=max&auto=format&n=WaCq_udETwNmiRAP&q=85&s=9bc5e05caea207967eecedc299d9b685" alt="Update API key" width="1516" height="1028" data-path="/images/authentication/update-api-keys.png" data-path="images/authentication/update-api-keys.png" />

### Revoke an existing API key

<Danger>
  **Revoking an API key is permanent. Any integration using the key immediately loses access, and you cannot undo this action.**
</Danger>

To revoke an existing API key, go to *Settings > Integrations > API Keys*, open the overflow action menu for the key, click **Revoke**, then confirm by clicking **OK**.

<img src="https://mintcdn.com/creativeforce/WaCq_udETwNmiRAP/images/authentication/revoke-api-keys.png?fit=max&auto=format&n=WaCq_udETwNmiRAP&q=85&s=913d39d0d4a70d9bcffe794386f08197" alt="Update API key" width="1516" height="1028" data-path="/images/authentication/revoke-api-keys.png" data-path="images/authentication/revoke-api-keys.png" />