Keys and scopes - Marro

A key belongs to your organization, not to a person. It can do exactly what its scopes allow, and only for modules your organization’s subscription includes.

Scopes

Scope	Name	Allows	Endpoints
`leads.read`	Read leads	Leads with every field, and the lists that describe them: fields, stages, sources and people.	List leads, Get a lead, List lead fields, List stages, List pipelines, List sources, List people
`leads.write`	Create and update leads	Create leads, change their fields, stage and owner, and add notes. Needs leads.read.	Create a lead, Capture a lead, Update a lead, Add a note
`leads.capture`	Capture leads	Capture leads from a website or form: add a lead or update the existing one with the same phone or email. Cannot read, list or change anything else.	Capture a lead, List lead fields

Kinds of key

Kind	Scopes	Expires after	Use it for
Website form	`leads.capture`	730 days	A website or landing-page form that sends enquiries in as leads. Can do nothing else.
Another application	Chosen when created	90 days	Any other integration. Choose the scopes it needs when you create it.

Rotate a key without downtime

Create a new key with the same scopes.
Switch your server to the new key and deploy.
Revoke the old key in Settings → Connections → API keys.

Revoke a key

Revoke a key in Settings → Connections → API keys. It stops working on the next request.

⌘I