API Keys

Create, manage, and rotate Bronto API keys to authenticate integrations and route telemetry to the correct service in your organization.

​

Manage API Keys

Navigate to the the Settings > API Keys item from the application sidebar to manage your API Keys.

​

Create a new API Key

1. Select Create a new API Key
2. Choose a name for this key
3. Select one or more roles for the API key
4. Select Create Key to be presented with the new api key. Please copy this to a safe location as it will not appear again

​

API Key Roles

Bronto allows users to specificy roles in order to limit what resources an api key can access. We currently provide the following roles:

Role Name	Description	Required for following features
Admin	Access to all read and write permissions on an account	Creating API keys
Search	Read access to an account’s telemetry data	Interacting with the REST API
Agent Read Only	Read-only access to telemetry data, monitors, and usage data; includes all Search permissions	Hosted MCP and agent integrations, including AWS DevOps Agent
Ingestion	Used for writing and sending data to a service in your account	Data ingestion

​

Best practices

• Create a separate API key for each service that sends data to Bronto.
• Give each key the least-privileged role it needs. Services that only send data need the Ingestion role.
• Never embed API keys in client-side code, such as browser or mobile apps, and don’t share keys between teams.
• Rotate keys on a schedule, and rotate a key at once if you suspect it has been exposed. To rotate a key, create a new key, update the service to use it, then delete the old key.
• Delete keys that are no longer in use.

To manage Bronto resources and query existing users, datasets, and Slack workspaces as code, use a dedicated API key with the Bronto provider for Terraform and OpenTofu.

​

Edit API Keys

• Within the API Key page, hover over a key you wish to edit, click pencil icon that appears on the right side
• Here you can edit the roles assocaited with the key and the key name
• Under Permissions we list the various part of the product this given key can interact with

​

Deleting API Keys

• Within the API Key page hover over a key you wish to permenantly delete
• Select the trash icon to delete
• Note: Deleting a key will permanently impact any services currently using it and revoke any access where it is being used.