Create and revoke TimeSentry API keys

Create a key

Open Settings > API Keys and choose Create API Key. Enter a descriptive name such as the application, server, or environment that will use it. Select Create Key.

Copy the full key immediately. It is shown only once; afterward the list displays only its prefix. Store it in an approved secret manager, not source code, documentation, screenshots, or chat.

Understand scope

An API key is scoped to the company under which it was created. Requests made with it act within that company's data and relationships. Create separate keys for separate applications or environments so one can be revoked without disrupting everything.

Monitor and revoke

The key list shows name, prefix, creation date, last-used date, and status. Review unused or unexpected keys regularly. Revoking a key is immediate and cannot be undone; any MCP client, script, or integration using it stops working.

Respond to exposure

Revoke the key immediately, create a replacement if needed, update the authorized client, and review recent use and affected records. Never ask support to recover the full value; create a new key instead.