topic Re: We detect an active API key in your portal in APIs & Integrations

We detect an active API key in your portal

JovanaM — Fri, 18 Nov 2022 09:21:18 GMT

Hello there,

we have switched our integration from API key and started using Private Apps instead. However we still get notification in our account :

We detect an active API key in your portal

PLEASE NOTE: API keys are being deprecated November 30.

Please work with your technical admin and Customer Success Rep to migrate away from API keys to ensure business critical functionality is not lost.

Has anyone else experienced this? Not really sure what to do with it, since we did deactivate the API key

Re: We detect an active API key in your portal

RMurnen — Fri, 18 Nov 2022 16:39:49 GMT

Yes. We are seeing the same issue across our accounts.

We created Private Apps for each use cases, swapped them in place of the API Key, and deactivated the API key.

But the alarming red banner persists. The wording of the message implies that it is checking our actual account for an active API Key. Perhaps that is false — it is not actively checking — and isn’t a dynamic banner. Instead it might be a static banner that doesn’t do any actual check/test…? Or maybe it only checks once a day…?

It is alarming to our clients to see it in their accounts. I can’t overstate how much we would like to know how to make it go away.

Re: We detect an active API key in your portal

RMurnen — Fri, 18 Nov 2022 17:12:41 GMT

I chatted with HubSpot Support.

Summary
The red warning banner will not go away on its own, even after deactivating all API Keys.

Chat Log

Jesse (HubSpot Support)

You can close that warning out after the key has been deactivated. There should be an <x> on the right hand side. It sounds like you've already checked that none getting this banner are going to be affected by the change.

k. So even though it implies that it is running a test to check our account, it is not actually checking?

Jesse (HubSpot Support)

It is according to what my team that published the banner shared. Not all portals have this, but some that have made recent calls or have an active key will.

Does it run the check once a day? or once an hour?
I don’t want to dismiss it if it is legitmately seeing an issue.

Jesse (HubSpot Support)

Just once from what I see. That check happened yesterday (17 November 2022).

Will the check re-run tomorrow and dismiss the banner automatically?

Jesse (HubSpot Support)

No. It was ran around a month ago as well. I'm not sure if my team is planning to re-publish this.

If you wanted a way to check, so long as the key is deactivated in the call log. The portal will be unaffected.