API Keys
Create and manage Observer API keys for DAP integrations and AI agents
API Keys
Create and manage Observer API keys directly from the Automation Platform dashboard. Keys authenticate external services, AI agents, and automation workflows against your DAP tenant.
Navigation
- Parent: Automation Platform
- Previous: Getting Started with DAP
- Related: Deslicer Observer API | Insights Nodes
Overview
The API Keys page lives under Automation Platform → Platform → API Keys in the dashboard. You use it to create tenant-scoped Observer API keys, assign scopes, and optionally wire a key into the AI integration so your agents can call DAP tools automatically.
Accessing the Page
Navigate to Automation Platform → Platform in the sidebar. The Platform section has three tabs: Status, API Keys, and Enrollment. Select the API Keys tab.
You need the tenant admin or owner role to access this page. Users with DAP platform view access can see the Automation Platform section, but listing and managing keys requires the tenant:manage capability.
Creating a Key
- Click New API Key in the top-right corner.
- Enter a descriptive name for the key (e.g.,
prod-read-onlyorai-agent-tools). - Select a scope using the toggle buttons:
| Scope | Label | What It Grants |
|---|---|---|
| read | Read | View-only access to fleet data, plans, executions, and insights |
| tools | AI agent / automation | Agent-level access for drafting plans and running insight queries |
| admin | Admin | Full administrative access — create and approve plans, manage hosts and tokens |
- Optionally check Connect to AI integration (available for
readandtoolsscopes only). This automatically wires the key into your Deslicer AI integration so agents can call DAP tools without manual configuration. - Click Create Key (or Create & Connect if the integration option is checked).
A modal displays the full API key with a 60-second countdown. Copy the key immediately — it cannot be retrieved after the modal closes.
If you selected Connect to AI integration, a confirmation note appears when the key is successfully wired. Your agents can now use DAP tools in chat.
Scope Guidance
- Use read for monitoring dashboards, reporting scripts, or any consumer that only needs to view fleet data.
- Use tools for AI agents and automation pipelines that draft change plans or run insight queries. This is the recommended scope for connecting agents to DAP.
- Use admin sparingly — it grants full control including plan approval, host management, and token administration. Admin keys should not be shared with AI agents.
Observer Compatibility
The tools scope requires a recent version of the Observer API. If your Observer instance does not support it, you see a message suggesting you use read instead or upgrade your Observer deployment.
Managing Keys
The API Keys page displays all your active and revoked keys in a searchable, sortable table.
Key Details
Each key row shows:
- Name and masked identifier (prefix…suffix)
- Node — the enrolled hostname, if the key is associated with one
- Scope — badge indicating
read,tools, oradmin - Created — creation date
- Expires — expiration date or "Never"; highlighted in amber if expiring soon, red if expired
- Last Used — date of last use or "Never"
- Status — Active (green) or Revoked (red)
Filtering and Search
- Search by key name, key prefix, or enrolled node hostname
- Filter by scope — show all keys or filter to
read,tools, oradmin - Filter by node — when keys are associated with enrolled nodes, filter by node hostname
- Sort columns by clicking headers (name, created, expires, last used)
The table paginates at 10 keys per page when you have more.
Revoking a Key
Click the trash icon on any active key row to revoke it. Revoked keys are immediately deactivated and cannot be restored. If the key was connected to the AI integration, the integration connection is also removed.
Revoked keys remain visible in the table with a Revoked status badge but have no active controls.
Empty State
If you have no keys yet, the page shows a prompt to Connect with a new key. Clicking it opens the create dialog pre-filled with a suggested name, read scope, and the Connect to AI integration option checked — a quick path to get your agents connected to DAP.
