Your account

API

Let external tools read and manage your account over Tito's own API.

Your accountSettings

What you can do here

Give a tool access to your account

Create a key scoped to exactly what the tool needs, and nothing else.

4 steps

Cut off a key that has leaked

Stop a key working immediately, everywhere it is being used.

3 steps

You create the keys yourself. A key can do what its own capabilities allow, and you can only give it capabilities you already hold.

The API reference lists every endpoint with its parameters, a request you can copy, and an example answer using your own account's event. From there you can get a temporary read-only key and send requests to see what comes back.

go.tito.io/acme/admin/settings

Good to know

API log, beside API in the settings list, logs every authenticated request.

Check it when a key has been failing. It keeps 90 days and shows the most recent 50.

A key is created and revoked. To change what one can do, revoke it and create another.
Tito command line tool, further down the same page, lists the machines somebody has signed in from to work on your theme. See Sign in from your own machine. Revoking one signs that machine out of every account they belong to.