---
updatedAt: 2026-09-24T07:40:40.000Z
agentTools:
  projectIndex: https://toursolver.readme.io/llms.txt
---

# Where is the API key?

API keys are managed from the <Anchor target="_blank" href="https://app.geoconcept.com/ToursolverCloud">Toursolver Back-Office</Anchor>, under Configuration > Roles & Profiles > API keys.

![](https://files.readme.io/6b4d495c89475398ba8d03ce683558c809b8fee5d6d89b42aa11a1d73386d3d2-AccessAPIKeys.gif)

<br />

## **Use the legacy API key**

* Log in to the Toursolver Back-Office.
* Open the **Configuration&#x20;**&#x70;age.
* Under **Roles & Profiles**, click **API keys**.
* Find the legacy key in the list and click the **Copy&#x20;**&#x69;con.

![](https://files.readme.io/d63b275ad76d812578807b5edf0b322bc57354d5b13df228af70ee259107a330-CopyLegacyAPIKey.gif)

<br />

> **Note:** The legacy key keeps working until you delete it. Your existing integrations won't be affected until then.

> **Recommended:** For better security, create a new API key with an expiration date. Update your integrations to use the new key, then delete the legacy key.

## Generate a new API key

* On the **API keys** page, click **Actions > Add**.
* Fill in the following:
  * **Name:** must be unique.
  * **Description:** what the key is for.
  * **Expiration date:** the date the key stops working.
* Click **Save**.
* Copy the API key right away. It is shown only once.

![](https://files.readme.io/ff89786154fb563f2bfb2ade71239f7b88ba0c2e9e4e741cc1932a8ffc9b9e19-GenerateNewAPIKey.gif)

<br />

> **Important:** You can't view or recover an API key in the interface after it's been created. If you lose one, generate a new key.

## Good practices

* **Use one key per use case**. You can create as many API keys as you need, so each integration or application can have its own.
* **Extend expiration dates before keys expire**. This keeps your services running without interruption. To extend a key:
  * On the **API keys** page, click the **Edit&#x20;**(pencil) icon next to the key.
  * Set a new **Expiry date**.
  * Click **Save**.
* **Disable a key instead of deleting it.** If you need to pause a key for a while, disable it and enable it again later. While a key is disabled, requests that use it are rejected. You can only do this on a key that already exists, not while you're creating one. To enable or disable a key:
  * On the **API keys** page, click the **Edit&#x20;**(pencil) icon next to the key.
  * Enable or disable the key.
  * Click **Save**.

> **Handle 429 Too Many Requests errors**. If you send too many requests in a short time, the API may return an HTTP 429 status code. This means your request was **not processed**, so you must send it again later. Wait a moment before you retry. If you keep getting 429, wait longer before each new attempt.