AM

API Keys & Webhooks

Programmatic access to the workspace. Keys inherit the permissions of the account that created them.

API docs

Secrets are shown once, at creation

Only the prefix is stored afterwards. If a key is lost, rotate it — there is no way to recover the original value.

Active keys

6

2 expiring within 30 days

Requests (30d)

2.41M

Peak 184 req/s

Error rate

0.14%

Mostly 429 rate limits

Webhook endpoints

3

1 failing delivery

API keys

Name Key Scopes Created by Last used Expires Actions

svc-billing (production)

Invoice sync to the finance warehouse

um_live_9f4c…a017 billing:read Wei Zhang 2 minutes ago Feb 18, 2027

warehouse-reader

Nightly analytics extract

um_live_2b81…c4d9 users:readaudit:read Samuel Adeyemi 6 hours ago Aug 14, 2027

scim-provisioner

Okta lifecycle sync

um_live_7e03…f882 users:writegroups:write Tomas Berg 14 minutes ago Sep 12, 2026

ci-smoke-tests

Staging only

um_test_c519…30ba users:read Zara Haddad Yesterday Sep 04, 2026

helpdesk-lookup

Zendesk sidebar app

um_live_a4f7…6e12 users:read Sofia Oliveira 3 hours ago Jan 22, 2027

audit-archiver

Nightly S3 export

um_live_d8b2…91fc audit:read Lucia Ferrero 14 hours ago Never

Webhook endpoints

  • https://hooks.northwind.co/identity/lifecycle

    user.created, user.suspended, user.deleted · 12,841 deliveries · 100% success

  • https://ops.northwind.co/webhooks/access

    role.assigned, admin.granted, admin.revoked · 3,204 deliveries · 99.8% success

  • https://legacy.northwind.co/hooks/sync

    All events · 41 consecutive failures · last error 504 Gateway Timeout

    Disabled automatically after 40 failures. Fix the endpoint and re-enable.

Getting started

Authenticate with a bearer token:

curl https://api.example.com/v1/users \
  -H "Authorization: Bearer um_live_…"

Every response carries rate-limit headers:

X-RateLimit-Limit: 1000
X-RateLimit-Remaining: 986
X-RateLimit-Reset: 1755600000
Full API reference