You can create, copy and delete a production's API keys from its Data & API page.

#Key types

Each key has one of three types. A key works like a password for everything its type can reach, so it's best to pick the narrowest type that does the job.

• Read-only access: every GET endpoint. This is the one to pick unless you're writing data back.
• Read-write access: the same, plus creating and updating shows, acts and venues, sending ticket sales and uploading files.
• Control running of live shows: the Showtime endpoints and nothing else, so you can give one to a lighting desk or a stream deck without giving access to your bookings.

#Generate a new API key

1. Open Settings > Data & API for your production.
2. Under API Keys, click Generate New API Key….
3. In the Generate New API Key modal, choose a key type.
   • Read-only access
   • Read-write access
   • Control running of live shows
4. Click Generate Key.
5. Click the token in the list to copy it.

#Delete an API key

1. Open the Data & API page for your production.
2. Find the token in the API Keys list.
3. Click the trash button on the token row.
4. In the Delete API Key confirmation modal, enter DELETE and confirm.

Deleting a key is permanent. Any app or service using that key loses access straight away.