AppsSecurity & Compliance

Security & Compliance · topic

API and machine access

Every credential is company-scoped, owned by a person and never able to reach more than that person, and minting one always happens in the browser.

Least-privilege machine access: scoped API keys with per-table permissions and rate limits, poweruser keys, 15-minute temporary keys and OAuth clients.

Start free
API key · AI lead capturebotScopedSample
Acts asIts own role
Requests per minute / day60 / 5000
Allowed originshttps://www.northwind.example

Resource access

Agent · Support AssistantRun
Tool · Look up orderRun
Table · productsREADWRITEDELETE

Checked against the owner’s access on every request.

How it fits together

How does api and machine access work in Autessa?

Every machine credential in Autessa is company-scoped and answers to a person. API keys carry their own scope and limits and never reach beyond their owner; poweruser keys act as you; OAuth clients sign in your users; and minting any of them requires a person in the browser.

IN THIS AREA

  • Per-table READ, WRITE and DELETE on keys
  • Acts as you or its own role
  • 15-minute temporary keys
  • No credential minting from scripts

In this area

Every api and machine access feature

Other areas

The rest of Autessa Security & Compliance

FAQ

API and machine access: questions

Can an API key read more data than I can?

No. Everything you pick is checked against your own access when you save, and every request is checked again at that moment.

What is the difference between an API key and a poweruser key?

Client API keys run what you have published and are scoped per resource. Poweruser keys manage your workspace as you.

Can my app let users sign in with their Autessa account?

Yes. Register an OAuth client and redirect users to Autessa’s hosted /oauth/login page.

API and machine access, built in

Every credential is company-scoped, owned by a person and never able to reach more than that person, and minting one always happens in the browser.

Start free

Reports, policies and questionnaires live on the Autessa Trust Center.

100% customizable, code and all

Make Autessa Security & Compliance fully your own.

Use it out of the box, then change anything. Ask Autobot, Autessa’s AI builder, for a new field, screen, report, workflow or agent and it builds it into your copy of the app. Or open the code and edit it yourself. Nothing is locked: the app, its data and its code are yours.

Start free and make it yours