Scoped API keys?
Posted: Tue Feb 24, 2026 9:06 am
Hi,
I've built some additional functionality over the simpro APIs, and whilst I've taken best efforts to securely store the API key, it does worry me that if that key got out, a bad actor could do a lot of damage.
Are there any plans on the simpro road map to scope these keys upon creation, such as only being able to GET/POST and not DELETE ?
Thanks
I've built some additional functionality over the simpro APIs, and whilst I've taken best efforts to securely store the API key, it does worry me that if that key got out, a bad actor could do a lot of damage.
Are there any plans on the simpro road map to scope these keys upon creation, such as only being able to GET/POST and not DELETE ?
Thanks