Credentials

Settings → Credentials holds everything a client needs to talk to your deployment: API keys for the REST API and application credentials for the Mobile SDK. The tab also shows the API Base URL of the deployment with a copy button.

​

API Keys

API keys authenticate requests to the REST API through the X-Open-Wearables-API-Key header and are used to embed widgets. See Authentication for how to send them.

• Create API Key - give the key a name and it appears in the list. The name is only a label, you can change it later.
• Show / copy - keys are masked in the table. Use the eye icon to reveal a key and the copy icon to copy it.
• Rename - update the display name of a key.
• Delete - the key stops working immediately for every integration that uses it.

​

Keys are shared across the deployment

API keys belong to the deployment, not to the developer who created them. Every developer sees all keys and can create, rename, and delete any of them, including keys created by someone else. The created by attribute is audit information only. It does not grant ownership and does not restrict what other developers can do with the key. See Team for the full access model.

​

Applications

Applications are the credentials used by the Mobile SDK. Each registered app gets an app_id and an app_secret.

• Create Application - give the app a name, for example “My iOS App”. The dialog then shows the App ID and the App Secret.
• The secret is shown only once. Store it in your backend environment right away. If you lose it, rotate the secret and update your backend.
• Rotate secret - generates a new secret and shows it once. The previous secret stops working immediately.
• Delete - removes the application. SDK clients using its credentials can no longer authenticate.