Creating an API Key in KudurruStone
API keys allow third-party applications and integrations to connect to your KudurruStone data securely. Each key is tied to your firm and can be labeled so you always know which integration is using it.
Important: API keys are shown to you only once at the time of creation. KudurruStone does not store the key and cannot recover it for you. Have a secure location ready before you begin.
Before You Begin
- Your firm must be on the Premier subscription tier. If you do not see the API Keys option, contact your account administrator or upgrade your subscription.
- You must be logged in as a firm administrator.
- Have a secure location ready to store the key (a password manager, secrets vault, or your application's environment configuration).
Where to Find API Keys
- Log in to KudurruStone.
- From the Settings menu near the top right.
- Select API Keys.
The API Keys page lists all keys that have been created for your firm, including their label, creation date, last used date, and current status.
Creating a New API Key
-
On the API Keys page, click Generate New Key in the top-right corner.
-
On the New API Key screen, enter a Key Label.
- Use a name that describes what the key will be used for — for example: Production Integration, Office Sync Tool, or Accounting Export.
- Labels help you identify and revoke individual keys later without disrupting other integrations.
-
Click Generate Key.
-
Your new API key will be displayed on the next screen.
This is the only time the key will be visible. Once you leave this page it cannot be retrieved. KudurruStone stores only a secure hash of the key — not the key itself.
-
Click the copy icon next to the key to copy it to your clipboard.
-
Paste the key into your secure storage location immediately.
-
Check the box confirming I have copied and securely stored this key.
-
Click Done — Go to API Keys to return to the key list.
After Creation
Once created, your new key will appear in the API Keys list with a status of Active. You can use the key immediately with the KudurruStone API.
Frequently Asked Questions
What happens if I lose my API key?
You will need to generate a new key. The lost key should be revoked from the API Keys page to prevent unauthorized access. See Revoking an API key for instructions.
How many API keys can my firm have?
You can create multiple keys — one per integration is recommended so that revoking one key does not affect your other connections.
Who can create and manage API keys?
Only firm administrators with access to the Company Administration area can create or revoke keys.