Skip to main content
For Enterprise organization admins. Use Tiro Platform to manage API keys and OAuth apps. Select the account, workspace, or organization you want to manage. OAuth apps are managed in the organization view.

Who can manage each connection?

See What data can connected apps see? for each key’s note access.

What can I configure on an organization API key?

  • Permissions. Grant only the scopes the integration needs. Granting all scopes does not expand the notes that an organization key can see.
  • Workspaces. Allow all current and future workspaces or select specific workspaces.
  • Expiration. Set an expiration date for a time-limited integration.
  • Allowed hosts. Restrict where the key can be used. Manage organization-wide rules in Organization Security.
Tiro displays a newly created key only once. Save it securely before leaving the page.

How do I manage OAuth apps?

An OAuth app lets an internal system access a member’s notes with their consent. Follow the OAuth apps guide to register one. In the app list, you can pause new authorization requests while leaving existing tokens in use. Resume authorizations before a member tries to connect again. Regenerating the client secret invalidates the old secret immediately, so prepare to update the server configuration.

What should I do if a key is exposed?

Delete the affected key and replace it in your integration. Deletion immediately stops integrations that still use the old key. If an OAuth client secret was exposed, regenerate it and update your server configuration.

Where do I set up SSO and SCIM?

Work with your account manager to configure SSO and SCIM with your organization’s identity system. See the organization admin guide for what to prepare. Related pages · Data access for connected apps · Organization Security