API Key access - non developer

Hi scotty2871​ 

Unfortunately, it isn't your key - likely it belonged to the developer who built the software.

As a developer you get access to the ability to use the MYOB API but it comes with serious security overlays to protect client's data - so it can't just be 'unlocked' with a key like a door.

Without a long-winded explanation on how to get into the API for client's data of which one component is a secret component of this access each developer gets with each key - you just cannot just plug a 'key' into a 'lock' and get your data.

There are 3 options .....

1. become a developer yourself and get keys; and that takes months to ages to do assuming you already have the pre-requisite coding skill...
2. contact the developer who build your software.
3. Get a new developer to get you in - again this developer won't give you his keys.

The Doc

Maybe i didnt word my question properly.  Its the API key so i cant connent MY Myob business to a developed app.  i.e. the aopp is aksing for my "Secret Key"

Hi scotty2871​ 

As per my explanation - no such thing as just a key .... the key is public info the secret is not and belongs to the developer.

The Doc

Who is the developer? Develpoer is me.

Use case is:  I own AR Premier.  I want to connect that to an app created in Base44 (by me) its asking for an API key to expose my data out of premier.  Is that not possible?

sorry if i am being thick 

Hi scotty2871​

No it isn't - you maybe a developer but you are not an MYOB registered developer which then entitles you to the required apikey and developer secret associated with that key.

And to become one is often a lengthy process - at present it is if you follow the API developers forum... and there is no pathways for you to get API Access other than be an MYOB accredited developer or to employ a developer such as myself who won't give you their keys and secrets anyways.

Developers protect these keys with considerable effort as they are part of the security overlay required to access client data via the API - if you were to employ someone for the purpose of 'just getting their keys' - someone tried that with me - selling me a story that the developer of their package had long gone - they had not - they no longer were willing to continue providing support and deleted the keys provided to this client - the app stopped....... the keys can be changed, deleted and new ones issued for this reason.

typically, the apikey per se is can be public but the developer secret key associated with that key is not - and in a clientside computer hard to encrypt totally hence apps tend to be run from developers websites where a key can be protected - yes there are ways to encrypt keys for clientside apps but nothing is unbreakable should that be done.

There are ways around this - but we tend to covet secret keys as they are essentially the private component to a private/public key set.

The Doc

The Doc