TL; DR. Our brand-new API Access management enables user-level secrets, sustains several secrets with audit abilities, supplies choices to disable or remove the API secrets, and also enhances the general safety and security of ChartMogul APIs. As well as the boosted adaptability this supplies you and also your group.
At ChartMogul, we constantly press our restrictions to bring you one of the most detailed collection of analytics attributes, one of the most assimilations, and also resolve one of the most utilize instances with our APIs. Simply put, we’re developing the most effective registration analytics item on the marketplace. Structure ChartMogul over the last 7 years has actually indicated paying attention to our customers, and also applying adjustments to the item that bring them one of the most worth. Nonetheless, seeking brand-new area and also expanding the item– making ChartMogul a much more incorporated component of our consumers’ information environment for instance– has actually led to some technological financial obligation. This is an usual story on the planet of SaaS, and also as Martin Fowler states in his Technical Debt Quadrant, some technology financial obligation is unpreventable. The current upgrade to our API accessibility administration is the outcome of resolving several of this technological financial obligation and also, certainly, paying attention to ask for our customers.
To much better highlight simply exactly how crucial these adjustments are, we need to review them in comparison to just how we’re presently handling API secrets. ChartMogul customers have actually traditionally utilized our APIs exclusively to import registration information. Initially, we produced API accessibility administration to resolve this usage instance. Admins can produce just one read-write API secret and also this secret can be shared among every person on the group– and also for whatever function.
Now that we have actually presented our Metrics API, produced an apple iphone application, and also are presently developing several methods to export data out of ChartMogul, it’s ended up being needed to upgrade our API Accessibility Monitoring remedy to sustain brand-new and also intricate situations, make the APIs much more safe, and also provide higher adaptability to your group. 
User-level several keys
Let’s go into the information of the most recent launch. All customers can produce API secrets with the API Accessibility Monitoring remedy. Admins can produce both read-write or read-only secrets, and also staff member can produce read-only secrets.
You can likewise produce several secrets based upon the demand. For instance, you can produce a read-write secret to import your registration information right into ChartMogul while a different read-only secret to obtain your metrics out of ChartMogul making use of the Metrics API. Admins can quickly disable non-active secrets, which is particularly beneficial when offboarding workers.
What occurs to my existing API secrets?
You do not need to make any kind of adjustments to take any kind of activity if you do not wish to. Your existing secrets will certainly function as they are, however we highly recommend transferring to the brand-new variation of API Accessibility administration and also developing different secrets for every of your assimilations.
Regenerate, disable or remove an API key
If your secret is jeopardized, after that you can either regrow the API Secret or disable it. Disabling a trick ought to be utilized as a short-term step, and also you can re-enable it if the secret is not jeopardized. If you no more require the API secret, you can remove it. Please keep in mind that after restoring a trick, you need to upgrade your assimilations with this brand-new API Secret.
QR codes
We likewise included the capacity to swiftly replicate your recently produced secrets by checking the QR code. This will certainly be without a doubt the most basic method to login to your ChartMogul account in the iPhone application. We’ll be making the updates to the mobile variation quickly.
We have actually obtained your back
ChartMogul tracks all activities in the ChartMogul UI and also API versus an individual which can assist determine destructive activities or safety and security violations. It is very important not to share your login information or your API secrets with any kind of various other customer. Simply produce different secrets for every combination.