Developer portal

Manage your sandbox API keys and see your sandboxes — self-service, no email round-trip. You need a verified developer account first.

Keys minted here are org-scoped tvk_… bearer tokens for sandbox-api.k8s.tangovision.dev, shown exactly once — store them in your secret manager. Each key carries a scope (sandbox by default — enough for module development) and expires after 90 days. Up to 5 active keys per org; revoke unused ones to free a slot.

Notes

• Minting requires a signed-in portal session. An API key can never mint further keys — so a leaked key can't multiply itself.
• Revocation is immediate: anything still using the key gets 401 on its next request.
• Every issuance, use, and revocation is recorded in an audit trail you can query from a portal session.
• Sandboxes are created with the API or CLI; this page lists the ones your org owns.

Scopes, expiry, revocation SLA, and the audit log are documented in detail on the API keys page.