See and remove tools and API keys connected to Vamo

Everything that can act on your Vamo account from outside the app is listed in one place: Set up > API keys. The page lists your API keys and, under Connected tools, the AI tools signed in with a browser. You can turn off any of them there, and it takes effect immediately.

Two kinds of access

A tool reaches Vamo in one of two ways. It holds an API key, or someone signed it in through a browser and approved it.

A signed-in tool holds no key, so it does not appear in the key list. It appears under Connected tools on the same page. That section is shown only when at least one tool is signed in.

Sign in or API key explains the difference and when each one suits.

What the key list shows

Each key has a row with:

• The name it was given when it was created.
• The beginning and last four characters of the key. The full key is shown once, at creation, and never again.
• Its access, which is the set of permissions chosen for it.
• The date it was created.
• The date it was last used, or Never.

A member sees the keys they created. Owners and admins see every key on the account, with who created each one.

What Connected tools shows

Each signed-in tool has a row with the tool's name, its access, the date it was connected and the date it was last used.

A member sees the tools they signed in. Owners and admins see every tool on the account. Their list has one more column, Signed in by, naming the person who approved it.

Turning a key off

Choose Revoke on the key's row and confirm. The key stops working immediately. This cannot be undone. Anything still using that key starts getting an unauthorized error.

A member can revoke their own keys. Owners and admins can revoke any key on the account.

Removing a connected tool

Choose Remove on the tool's row and confirm. The tool is signed out immediately. To use it with Vamo again, someone signs in from the tool and approves it again.

Owners and admins can remove any tool on the account, including one another person signed in. The confirmation says whose tool it is.

Replacing a key

There is no rotate. To replace a key:

1. Create a new key with the same access.
2. Give the new key to whatever used the old one.
3. Check the new key's Last used date changes from Never.
4. Revoke the old key.

Doing it in this order means nothing stops working in between. If a key has been seen by someone who should not have it, revoke it first and replace it after.

When to look at this page

• Someone leaves the team, or stops using a tool. Remove what they connected.
• A key has been pasted somewhere it should not be. Revoke it.
• A Last used date is old, or says Never. If nobody needs that key or tool, turn it off.
• You are not sure what a key is for. The name and the Last used date are the two clues. Name new keys for the person or agent that will use them.

What to do next

• Keep your API key safe covers where a key should and should not live.
• Check Vamo is connected helps after you replace a key or sign a tool in again.
• Vamo worked, then stopped covers a tool that lost its connection, including one that was revoked or removed.