Create a Tomba API key
Tomba authenticates every request with an API key and your account secret. Both are listed on the API Keys page of the Tomba dashboard.
Sign in to your Tomba account.
- Choose Continue with Google, Continue with Linkedin, Continue with Github, or Continue with Work Email.
- Sign in with a passkey and Sign in with SSO are also available.
In the sidebar, under // developers, click API.
- The page opens on API Keys, which you can also reach directly at `https://app.tomba.io/api`.
On the API Keys page, click + New Key.
- In the Create API Key dialog, enter a Name of at least 2 characters that identifies this integration.
- Name: `StackOne Integration`
- Pick an Expires window. The dialog defaults to 90 days and the longest available lifetime is 365 days.
- Click Create Key.
- Tomba emails you 30 days, 7 days, and 1 day before a key expires, so you can replace it before it lapses.
Both values sit in the API Key & Secret column of the API Keys table. Click the eye icon to reveal a value and the copy icon to copy it.
- Copy the value on the row of the key you just created, and paste it into the API Key or Auto Generated By Tomba (default or in sandbox account) field in StackOne Hub.
- Copy the value on the Account secret row, and paste it into the API Secret field in StackOne Hub.
- Format: `ta_` followed by 37 characters for the key, and `ts_` followed by a UUID for the account secret
- The Account secret row shows Expires as Never and is rotated from Settings.
- Keep both values on a server and store them securely for use later. Anyone who obtains them can spend your credits.
