Create, store, rotate, and deactivate API keys

Tags: product:data-integrations intent:api-key intent:api intent:credential

Go to School Dashboard > Integrations > API Keys and select Generate New API Key. Enter a label that identifies the consuming system and environment. Copy the token immediately to an approved secret manager: after leaving the page, the full API key cannot be retrieved again.

The API Keys page shows active tokens, creation date, last-used date when available, and deactivation controls. Rotate a key by creating a new labeled key, updating and testing the consumer, then deactivating the old key. Deactivation is the correct response to suspected exposure; never paste a key into a support ticket, email, browser screenshot, client-side application, or shared document.

API behavior, pagination, permissions, and supported fields should follow the current API documentation used by the integration. A key authenticates the integration; it does not grant fields or actions beyond its account context.