What the Public API is
The Public API (an Elite capability) lets you drive TalixTrade from your own scripts. You create an API key — a token — with the permissions and expiry you choose, then call the v1 endpoints to pause, resume or stop a system and pull stats. A ready curl example lives on the API page.
How keys work
- •The plaintext key is shown once, at creation — save it then. Afterward you only ever see a mask.
- •Each key lists its last-used time, so you can spot a stale or unexpected one.
- •Keys can be revoked at any time, and you can set an expiry up front.
Use it safely
Grant least privilege — only the permissions a script actually needs. Set an expiry, rotate keys periodically, and never commit a key to a repo. Because the plaintext is shown only once, a mask leaked later is useless on its own. Rate limits apply to keep usage sane.
The pitfall
Treating an API key like a password you paste everywhere. A broadly-scoped key is a broadly-scoped risk — scope it narrowly, expire it, rotate it. If several people need access, use Teams, not a shared key.
Next
Manage the rest of your account safety in Security & your account, and collaborate through Teams instead of sharing tokens.