Make API Keys

Give every system that calls the API its own key, with only the permissions it needs. A turnstile that checks faces needs Verify; a front desk that enrols visitors needs Enrol.

1. In the dashboard open API keys (admins only) and choose Add an API key.
2. Name: where the key is used, such as turnstile-gate-1. It appears in the request log and the audit log.
3. Allowed: tick the permissions. Admin reaches settings, keys and logs: give it only to trusted systems.
4. Expires: optional. An expired key stops working on that date.
5. Choose Create key and copy Your new API key. It is shown once; the server keeps only a hash.

To stop a key at once, choose Revoke next to it. The Request log shows every call a key made: time, call, result and duration, never photos or request bodies.

See Authentication for the headers and the permission names in the API.