In OnlyX, click Settings. Then click API & MCP. On a phone, tap More, then Settings, then API & MCP.The API keys card lists the keys of this workspace.
2
Open the create window
On the API keys card, click Create API key. The Create API key window opens.
3
Name the key
In Name, enter what will use the key, for example “Zapier” or “Weekly report script”. You see this name in the list later.
4
Choose what the key may do
Under Access, keep Read only unless the tool must change something. Read only reads the inbox, fans, stats and settings, and changes nothing.Full access allows everything, including messaging fans. Custom lets you tick each permission yourself. It starts from the choice you had before.
Some permissions reach real fans. If you pick one, the window says “This key can reach real fans. It can:”. Then it lists what the key can do.
1 How much the key may do · 2 The warning for permissions that reach fans · 3 Create key
5
Choose the creators
Under Creators, keep All creators: every creator in the workspace, including ones you add later.Or click Only some creators, then click each creator the key may see. The key sees nothing about the others.
6
Choose when the key expires
Under Expires, click Never, 30 days, 90 days or 1 year. An expired key stops working.
7
Create the key
Click Create key. The window changes to Save your API key.
OnlyX shows the key once, right after you create it. It never shows the key again.
1
Copy the key
Click the copy button next to the key. “Copied.” shows.
1 The key is shown only now · 2 The key and its copy button · 3 Done
2
Paste the key somewhere safe
Paste the key into a password manager, or into the tool that needs it.Anyone who has the key can use your workspace with the access you chose. Do not send it in a chat or an email.
3
Close the window
Click Done. The key shows in the list.
Try it and Use it with Claude Code hold ready-made commands with your key in them, for a developer. To learn how to call the OnlyX API, see Quickstart and Authentication.
The key’s name, and the first and last characters of the key. The rest of the key is never shown.
When it was created, and by whom.
What it may do: Full access, Read only, or the names of its permissions.
Which creators it sees: All creators, or the creators’ names.
When it was last used, or “Never used”.
When it expires, or “Never expires”.
Two badges need your attention:
Expired: the key has stopped working. It stays in the list until you revoke it.
Left the workspace: the person who created the key has left your team. The key still works. If they should no longer have access, revoke it and create a new one.
1 Create API key · 2 What the key may do, and which creators it sees · 3 Revoke
On the key’s row, click the bin. The Revoke this API key? window opens.
2
Revoke the key
Click Revoke key. A message confirms that the key was revoked.
Everything that uses the key stops working at once: scripts, tools, and any AI assistant connected with it. You cannot undo this. If you need access again, create a new key.Revoked keys move to Revoked keys, at the end of the card. It shows the last 20.When OnlyX support helps you in your workspace, they can see your keys. They cannot create, rename or revoke them.
"This workspace already has 25 active API keys. Revoke one you no longer use first."
The workspace has reached its limit of 25 active keys. Revoke a key that nothing uses any more, then create the new one. Expired keys do not count toward the limit.
Create key is greyed out
Something is missing. Enter a name first. Then the line next to the buttons says what else is missing, for example “Choose at least one creator.”
I lost the key
OnlyX cannot show it again. Revoke the key, then create a new one and save it right away.
"Its secret was never shown, so nothing can use it"
The window closed before the key could show. For example, you switched to another Settings tab while the key was being created. Nothing can use that key, but it still counts toward the limit. Revoke it, then create another key.
"A key was created but its secret was not shown"
You left Settings while the key was being created. Find the key by its name in the list and revoke it. Then create another key.
A tool that used a key stopped working
Look for the key in the list. If it shows Expired, it ran out: create a new key. If it is under Revoked keys, someone revoked it. Create a new key and give it to the tool.
"The keys could not be loaded."
OnlyX could not load the list. Click Try again.
I do not see API & MCP in Settings
Only owners and admins see API & MCP. Ask an owner or admin of your workspace.
