API Keys

API keys let you connect external tools to your TrackOut account. Use them with the MCP server or any HTTP client to read and write your garage data programmatically.

Creating a key

1. Go to Settings and find the API Keys section
2. Click Create API Key
3. Enter a name to identify the key (e.g., "Claude Code", "Maintenance Script")
4. Copy the key immediately -- it is shown only once

Managing keys

The API Keys section in Settings shows all active keys with:

• Name -- the label you gave the key
• Prefix -- the first few characters (e.g., tok_a1b2...) for identification
• Created date -- when the key was generated
• Last used -- when the key was last used to make an API call

You can have up to 5 active keys at a time. To create a new key when at the limit, revoke an existing one first.

Revoking a key

Click the trash icon next to any key to revoke it. Revoked keys stop working immediately -- any tool using that key will receive a 401 error.

Security

• Keys are hashed before storage -- TrackOut never stores the plaintext key
• Each key is scoped to your account -- it can only access your data
• Use a separate key per tool so you can revoke access individually
• Rotate keys periodically, especially if you suspect one may have been exposed