API Access

arrow_backBack to Account

Connect an Agent

Create a scoped key, copy a starter snippet, and connect your agent in minutes.

Tickory already supports least-privilege API keys. This flow adds the missing last mile: recommended scopes, copy-ready environment variables, a cURL smoke test, and a starter MCP config.

No active key yet

Start by creating a key with manage_scans and read_events so your agent can validate scans and inspect alert events.

Rollout note

Rotating a key revokes the previous secret immediately. Update any connected agents before closing the replacement secret modal.

Create API key

Choose only the scopes this integration needs.

Scopes

One-time secret display

The full secret is returned only during creation or rotation. Once you dismiss it, you must rotate the key to get a new secret.

Existing keys

Track usage, revoke secrets, and rotate keys without leaving the app.