API Access
arrow_backBack to Account
Connect an Agent
Create a scoped key, copy a starter snippet, and connect your agent in minutes.
Tickory already supports least-privilege API keys. This flow adds the missing last mile: recommended scopes, copy-ready environment variables, a cURL smoke test, and a starter MCP config.
No active key yet
Start by creating a key with manage_scans and read_events so your agent can validate scans and inspect alert events.
Rollout note
Rotating a key revokes the previous secret immediately. Update any connected agents before closing the replacement secret modal.
Create API key
Choose only the scopes this integration needs.
One-time secret display
The full secret is returned only during creation or rotation. Once you dismiss it, you must rotate the key to get a new secret.
Existing keys
Track usage, revoke secrets, and rotate keys without leaving the app.