API keys, OAuth apps, and approved apps in the QPosty dashboard.
Developer settings
Open https://app.qposty.com/settings/developers.
Access tab
| Control | Purpose |
|---|---|
| API key | Automate your workspace (qp_live_…) |
| Reveal / Copy | Only after generate or rotate |
| Rotate key | Invalidates the previous key immediately |
| Approved apps | Third-party OAuth apps you authorized — Revoke cuts off their pos_ tokens |
Apps tab
Register an OAuth application when other QPosty users will connect your product.
You provide:
- App name (shown on consent)
- Description (optional)
- Picture URL (optional)
- Redirect URL (required)
You receive:
- Client ID —
pca_… - Client Secret —
pcs_…(shown once; rotate anytime)
API key vs OAuth app
| API key | OAuth app | |
|---|---|---|
| Acts as | You | Whoever authorizes |
| Best for | Scripts, n8n, internal tools | SaaS / AI products |
| Credential | qp_live_ | pos_ after consent |
| Revoking | Rotate the key | User revokes in Approved apps |
See Authentication and OAuth apps.