API Key Management
API keys authenticate your integrations with Doclio. Each key has specific scopes that control what it can access.
Creating an API Key
Only organisation owners and admins can create API keys.
- Go to Settings → API
- Click Create API Key
- Give the key a descriptive name (e.g., "Power BI Integration")
- Select the scopes/permissions the key needs
- Click Create
- Copy the key immediately — it won't be shown again
Important: Store your API key securely. Never share it in public repositories, client-side code, or unencrypted channels. If a key is compromised, revoke it immediately.
Key Scopes
| Scope | Access |
|---|---|
read:projects |
List and read project data |
read:drawings |
Access drawing metadata and files |
read:annotations |
Read annotations and comments |
write:annotations |
Update existing annotations (status, priority, assignee, title, description, due date). Annotations cannot be created via the API. |
Revoking a Key
- Go to Settings → API
- Find the key you want to revoke
- Click Revoke
- The key is immediately disabled — any integrations using it will stop working