Your API keys are on the API Keys page. An API key is a private code that lets another app or tool use your Tomba account.
Find your key and secret
Step 1. Open API in the left menu.
Step 2. Find the row you need in the table. The values are in the API Key & Secret column. Click the eye icon to show a value, or the copy icon to copy it.
Most tools ask for both a key and the secret:
API key: You can have several, depending on your plan. Give each one a name, so you know which app uses it. Every key expires.
Account secret: Your account has one, shared by all of your keys. It's the top row of the table, and it doesn't expire.
⚠️ Important: Keep both private. Anyone who has them can spend your credits.
Create a new key
Click New Key.
Under Name, say where the key will be used, such as "Zapier".
Under Expires, choose 7 days, 30 days, 90 days, 180 days or 1 year.
Click Create Key.
Renew, reset or delete a key
Use the menu under Actions on the key's row:
Reset Key gives you a new key that lasts a year. The old key stops working, so update every app that uses it.
Reset & renew does the same for a key that has already expired.
Delete Key removes the key for good. Update your apps first.
Tomba emails the account owner 30 days, 7 days and 1 day before a key expires.
Reset your account secret
Go to Settings > Profile and click Edit next to API Secret Key. Enter your current password and click Reset Secret Key.
⚠️ Important: Your old secret stops working straight away, and you'll be signed out. Update every app that uses it.
Common questions
Can my team see my keys?
Yes. In a workspace, members can see and manage each other's keys. The Made by column shows who created each one.
For developers: see the Tomba docs.
Related articles