What can an API key see and change within Rundit platform?
An API key can only see and change what you allow, and never more than your own Rundit account can access.
When you create a key, you choose permissions for each type of data:
|
Data |
Read |
Write |
|---|---|---|
|
Companies |
Yes |
No |
|
Funds |
Yes |
No |
|
Transactions |
Yes |
No |
|
Metrics |
Yes |
Yes |
|
Metric types |
Yes |
Yes |
|
Metric templates (the metrics you request from portfolio companies) |
Yes |
Yes |
|
Positions |
Yes |
No |
|
Reports |
Yes |
No |
|
Position summaries (position and metric values) |
Yes |
No |
Untick anything the key doesn't need. You can also set an expiry date, so the key stops working automatically. Every request made with the key is checked against its permissions.
Tip: create one key per tool or workflow, so you can switch one off without affecting the others.