> For the complete documentation index, see [llms.txt](https://docs.supademo.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.supademo.com/workspace-settings/api.md).

# API

The API page lets you manage workspace API access and the apps connected to your account. From here, you can copy or regenerate your workspace API key and view, audit, or revoke any third-party apps (like Claude or ChatGPT) that are connected to your workspace.

### Workspace API Key

Your workspace API key authenticates requests to Supademo's API. It's used to integrate with tools like Zapier, custom internal systems, or any third-party service that needs to read or write data on behalf of your workspace.

#### Accessing your API key

1. Log in to Supademo.
2. From the bottom left sidebar, click on the **⚙ icon > Workspace Settings**.
3. Under the Administration section, click on **API**.
4. Your workspace API key is shown under **Workspace API Key**. Use the **copy** icon next to the key to copy it to your clipboard.

{% hint style="danger" %}
 **Keep your API key secure.** Anyone with access to your API key can make requests on your workspace's behalf. Avoid sharing it publicly, committing it to version control, or pasting it into untrusted tools.
{% endhint %}

#### Regenerating your API key

If you suspect your key has been exposed or you want to rotate it as a security practice, you can regenerate it.

1. On the API page, click **Regenerate** next to your workspace API key.
2. A new key will be generated and displayed.
3. Copy the new key and update it in any integrations or scripts that use the old one.

{% hint style="warning" %}
Regenerating your API key immediately invalidates the old key. Any active integrations using the previous key will stop working until you update them with the new value.
{% endhint %}

### Connected apps

The Connected apps section shows third-party applications (like Claude and ChatGPT) that have been authorized to access this workspace on your behalf. These connections use scoped tokens rather than your workspace API key, which makes them safer for AI-driven workflows and easier to revoke individually.

#### What's shown in the table

For each connected app, the table displays:

* **App** — the name of the connected application (e.g. Claude, ChatGPT).
* **Created** — when the connection was first authorized.
* **Last used** — the most recent time the app made a request to your workspace.
* **Expires** — when the token will automatically expire. After expiry, the user will need to re-authorize the app.
* **Status** — whether the token is currently Active.

#### Revoking a connected app

To immediately disconnect an app from your workspace:

1. Find the app in the Connected apps table.
2. Click **Revoke** in the right-hand column for that row.

The app will lose access to your workspace immediately. If you want to reconnect it later, you'll need to re-authorize it through that app's connection flow.

{% hint style="warning" %}
**When to revoke:** Revoke an app if you notice unexpected activity, if a teammate who set up the connection leaves the workspace, or if you no longer use the integration. Revoking is safer than regenerating your API key when the issue is scoped to one app.
{% endhint %}

### Using your API key

Once you've copied your API key, you can use it to authenticate requests to Supademo's API. The most common use case is connecting Supademo to automation platforms like Zapier — paste the key into the authentication step when setting up the integration.

For full endpoint documentation, see the [Developer docs](https://docs.supademo.com/admin-and-billing/integrations/data-and-api/developer-docs).