Scoped API keys?

Wish the API had something it doesn't? Post here!
Forum rules
  • Check the documentation first. Before posting questions, please check the documentation to ensure it doesn't already cover what you need.
  • No spam. All automated messages, advertisements, and links to competitor websites will be deleted immediately.
  • Post in relevant sub-forums only. Messages posted in the wrong topic area will be removed and placed in the correct sub-forum by moderators.
  • Respect other users. No flaming or abusing fellow forum members. Users who continue to post inflammatory, abusive comments will be deleted from the forum after two warnings are issued by moderators.
  • Harassment. No threats or harassment of other users will be tolerated. Any instance of threatening or harassing behavior is grounds for deletion from the forums.
  • Adult content. No profanity or pornography is allowed. Posts containing adult material will be deleted.
  • Bandwidth. All images and signatures must be 500 x 500 pixels or smaller. Posts containing over-sized images and signatures will be removed.
  • Illegal content. No re-posting of copyrighted materials or other illegal content is allowed. Any posts containing illegal content or copyrighted materials will be deleted.
Post Reply
MrWombat
Posts: 5
Joined: Wed Dec 10, 2025 10:55 am
Location: Australia

Scoped API keys?

Post by MrWombat » Tue Feb 24, 2026 9:06 am

Hi,

I've built some additional functionality over the simpro APIs, and whilst I've taken best efforts to securely store the API key, it does worry me that if that key got out, a bad actor could do a lot of damage.

Are there any plans on the simpro road map to scope these keys upon creation, such as only being able to GET/POST and not DELETE ?

Thanks
Software engineer building AI automations and cloud integrations on Simpro. Need to integrate another tool or do something custom? Slide into the DMs
Top
Post Reply

Return to “Feature Requests”