Create and manage API keys and MCP tokens
API keys and MCP tokens each let you connect your own tools or scripts to Sandtime.io, through the REST API or the MCP server respectively, without sharing your account password.
Good use cases
- scripting reports or exports outside the app,
- connecting an AI assistant through the MCP server,
- integrating Sandtime.io data into your own internal tools.
Creating a key
Use whichever page matches what you're setting up:
From the API page
- Go to Settings > Integrations > API.
- Click Create API key.
- Copy the key right away - it's shown once and never displayed again.
From the MCP page
- Go to Settings > Integrations > MCP.
- Click Create API key.
- Copy the key right away - it's shown once and never displayed again.
Revoking a key
Go to Settings > Integrations > API to manage every key, no matter where it was created. Revoking a key from the Active list takes effect immediately, so anything still using it loses access right away.
Revoke all removes every active key at once, and also signs you out of your current session, since sessions and API keys share the same underlying mechanism. You'll need to sign back in afterward.
The same applies in reverse: Sign out revokes your API keys. Every key issued before you signed out stops working and is listed as revoked when you sign back in, so any integration using one needs a new key.
After revoking
Revoked keys stay listed with their creation and revocation dates for reference, but can't be reactivated - create a new one instead.