New Ory Agent Security is now live! Claim your complimentary test drive. Get Started!

Skip to main content

Test API keys in the Playground

info

Ory Talos Secure API Keys on Ory Network is in preview. The HTTP API is versioned v2alpha1, and request and response shapes can change. Pin the version of the Ory SDK that you use.

Use the Playground in the Ory Console to verify an API key of Ory Talos Secure API Keys or derive a token from it without writing code.

Before you begin​

  • To manage keys in the Ory Console, you need the Owner or Developer role in the project. Members with the Viewer role can't view keys or send requests from the Playground.
  • If an API key page in the Ory Console shows Enable Ory Talos, select Enable API keys. The change takes a short time to apply. See Eventual consistency.

Verify a key or derive a token​

  1. Go to API Keys → Playground in the Ory Console.
  2. To verify a credential, paste a key secret or a derived token into API key in the Verify API key section, and select Verify. The result shows whether the credential is valid, and the details of the key. To see the full response, select Show raw JSON.
  3. To derive a token, paste a key secret into Source API key in the Derive token section. Choose a Token type, either JWT or Macaroon. Optionally, fill in TTL, Scopes, and Custom claims (JSON). Then select Derive token.
warning

The Playground sends real verify and derive requests, so they count as use of the key. They can update Last used, and derived tokens and failed verifications appear as events in Activity → Logs & events in the Ory Console. A verify also counts against the per-key rate limit of the key when that limit is enforced. Tokens that you derive in the Playground are real tokens and stay valid until they expire.