Generate and Manage API Key Sets

  • Updated

Demandbase One supports API Key Sets, a secure way to manage authentication for your integrations. Previously, each user could have only one API token, tied to their own account. With API Key Sets, you can create and manage multiple tokens at the platform level. This keeps integrations stable, simplifies access control, and follows current security standards.

API Key Sets authenticate requests to Demandbase’s public APIs. For the full API reference, see developer.demandbase.com.

Benefits of API Key Sets

  • Platform-level token management: Tokens belong to the platform, not to individual users. Integrations keep working when a user changes roles or their account is deactivated.
  • Automatic expiration and manual control: JWT access tokens expire after 8 hours. You can also deactivate or delete tokens, or delete an entire key set, at any time.
  • Improved security and compliance: All tokens are encrypted in the Demandbase database to protect integration credentials from unauthorized access.

Generate API Key Sets

You can create up to 5 API Key Sets. Within each key set, you can create multiple tokens, but only 5 tokens can be active at a time.

  1. From the navigate bar, go to Settings > APIs > API Key Sets.
  2. Click Create New.
  3. Enter an API Key Set Name and click Save.
  4. On the API Permissions step, select the APIs this key set can access.
    Important: To make B2B API and Export API available as options, reach out to your Demandbase Account Team.
  5. Click Next.
  6. Click Create Token.
  7. The API token generates two keys: a Client ID and a Client Secret. Copy both and store them in a secure location. You need them to generate a JWT access token.
    Important: The Client Secret isn’t shown again after you close the window.
    API-Key-Sets-Create-token-copy-client.png
  8. Click OK.

Use Generated API Tokens

To authenticate your API requests, generate a JWT access token using your Client ID and Client Secret key.

  1. In the Generate JWT Access Token endpoint, pass your Client ID and Client Secret as the clientId and clientSecret parameters.
    Important: The access token is valid for 8 hours.
  2. Include the access token in the header of your API requests:
    Authorization: Bearer YOUR_JWT_TOKEN

This access token authenticates requests to supported Demandbase APIs. See API documentation.

Manage API Key Sets and Tokens

You can delete or edit API Key Sets. You can also activate, deactivate, or delete individual API Tokens within each key set.

Manage API Key Sets

  1. From the navigate bar, go to Settings > APIs > API Key Sets.
  2. Hover over a key set and click the settings icon.
  3. Select one of the following options:
    • View Details: View and manage the API tokens within the key set.
    • Delete: Delete the key set.
      Important: Deactivate all tokens in the key set before you delete it.

Manage API Tokens

  1. From the navigate bar, go to Settings > APIs > API Key Sets.
  2. Hover over a key set and click the settings icon.
  3. Click View Details.
  4. Hover over a token and click the settings icon.
  5. Select one of the following options:
    • Deactivate: Deactivate an active token.
    • Activate: Activate a deactivated token. Up to 5 tokens can be active at a time.
    • Delete: Delete the token from the key set.