Manage API Keys

Manage Talonic API keys programmatically: list masked keys, mint a new scoped key (the raw secret is returned once), and revoke keys you no longer need.

The API key management endpoints let a workspace manage its own Talonic API keys programmatically: list your keys (always masked, the raw secret is never returned again), mint a new key with a name and a chosen scope set, and revoke a key you no longer need. The raw secret of a new key is returned exactly once, on creation; store it immediately.

A key carries a subset of the valid scopes: extract, read, write, operations, billing, delivery. If you omit scopes on create, the key defaults to extract, read, write, operations. Revocation is scoped to your own workspace; revoking a key that belongs to another organization is impossible and returns 404.

{
  "id": "a1b2c3d4-e5f6-7890-abcd-ef1234567890",
  "name": "ci-pipeline",
  "key": "tlnc_0123456789abcdef0123456789abcdef",
  "masked_prefix": "tlnc_a1b2c3...",
  "scopes": ["extract", "read"],
  "created_at": "2026-07-01T10:00:00.000Z",
  "warning": "Store this key now. It will not be shown again."
}