Global Clinic ConnectGuides
← All screen guides
ConfigurationAvailable

Developer access

Create and revoke narrowly scoped server API keys for trusted integrations. Full secrets are shown once and cannot be recovered.

Open this screen View the set up your clinic and team walkthrough
01

What you can do here

Server-owned scope catalog

Choose only scopes currently supported by the platform. Unknown or invented scopes are rejected by the server.

One-time secret

The full key appears once after creation. The workspace stores only a hash and a short recognition prefix.

Rotation and revocation

Review expiry and last use, create a replacement before rotation, and revoke a compromised key immediately.

02

Follow these steps

Create a key

  1. Choose Create API key and enter a purpose-specific label.
  2. Select the smallest required scopes and set an expiry.
  3. Copy the one-time secret into an approved server-side secret manager, acknowledge storage, and close the dialog.
03

Helpful habits

  • Use one key per integration and environment.
  • Never place a key in browser code, mobile apps, logs, or support messages.
  • Revoke unused keys and rotate before expiry.
04

Tips

  • The recognition prefix helps identify a key without revealing the secret.
  • Last used is a best-effort timestamp and never contains request content.
Next