What is the API Key?
The API key is a unique credential that authenticates your organization's requests to the TripLog Web API. It grants full read and write access to all user data within your organization, so it should be treated like a password.
Generating the API Key
Only an administrator can generate the API key.
Log in to the TripLog web app at app.triplog.net
Go to Policies & Settings
In the left sidebar, select Advanced Settings
Click Generate API Key
If a key has already been generated, click Show API Key to reveal it.
Note: Only one API key exists per organization. Regenerating it will invalidate the previous key immediately — any integrations using the old key will stop working until updated.
Using the API Key
Include the key in the Authorization header of every API request:
Authorization: apikey YOUR_API_KEY
Example request:
GET https://app.triplog.net/web/api/users Authorization: apikey YOUR_API_KEY
Keeping Your Key Secure
Do not share the API key or include it in client-side code
Do not commit it to source control (e.g., GitHub)
Store it in an environment variable or secrets manager
If the key is compromised, regenerate it immediately from the Advanced Settings page — the old key will be revoked
Related Articles