Skip to main content
Create a new API key from the API Keys page in the dashboard. The raw key value is shown exactly once, the moment it is created — copy it and store it somewhere safe. Tumban keeps only the SHA-256 hash of the key, so a lost value can never be recovered; you simply revoke the key and create a new one.

​
Create a key

1

Open API Keys

From the sidebar, click API Keys.
2

Name and create

In the Create New Key tile, type a label in the Key name field (placeholder Key name (e.g. production)), then press Create Key. The label is how you’ll recognise the key later in the Active Keys list, so make it descriptive — for example ci-pipeline or production. If you leave it blank, the key is named default.
3

Copy the key

The full key appears once in the highlighted box, beneath the prompt “New key — copy it now. It won’t be shown again.” Click Copy. Because Tumban stores only the SHA-256 hash, losing this value means revoking the key and creating a replacement.
The key value is displayed only at creation. If you lose it, revoke the key and create a new one — there is no recovery.
Create a separate key per integration (CI, a script, a teammate’s laptop) rather than sharing one. Each key shows up individually under Active Keys, so you can revoke a single integration’s access without disrupting the others.