API keys

An API key lets other software (your website, a spreadsheet script, an accounting tool) read and change your business’s data through the Kripos API. Owners manage keys on Integrations.

Make a key

1. Open Integrations and choose New API key.
2. Name it after what it’s for (Website orders).
3. Tick the permissions it needs, and nothing more. They come from the modules you have installed. Keys can never manage people, roles, devices, your plan, billing or integrations.
4. Optionally limit it to some outlets.
5. Save, then copy the key now: it’s shown once. Kripos keeps only a fingerprint of it and its last four characters.

The software sends it as Authorization: Bearer rk_…. Changes made with it appear in the audit log under the key’s name.

Revoke a key

Choose Revoke on the key. It stops working at once. The list shows when each key was last used, so you can spot keys nobody uses.

Limits

Each key may make 300 requests a minute. Software that sends more is told to wait (429), so it can’t slow down your tills.