Create a DoorSpot API key to give another system — an accounting tool, an automation platform, a custom dashboard, or an AI agent like Claude — secure, scoped access to your DoorSpot data.
Before you begin
You need admin (or owner) access to the DoorSpot account you want to connect.
If you manage more than one company in DoorSpot, use the account switcher at the top of the page to select the correct one first — connections are specific to a single company account.
Know whether the integration only needs to read data, or also needs to create or change things — that makes the permissions step below easier.
Steps
Go to Settings > Developer in the left-hand navigation. This page lists every key on the account with its name, a preview of the key, how many permissions it has, when it was last used, and when it was created.
Click Create API key in the top right.
Use the pencil icon to rename "New key" to something that clearly identifies what it's for — for example, "QuickBooks Sync" or "Claude AI Assistant." Clear names matter once you have more than one connection.
Choose permissions. You'll see a table of DoorSpot's data resources — Units, Reservations, Invoices, Contacts, and so on — with separate Read and Write checkboxes for each. Use the search box to jump to a resource, and check only what the integration actually needs.
If this key will be used by an AI assistant or bot, turn on Use with AI. This marks the key as an AI Bot token and automatically pseudonymizes names and redacts emails, phone numbers, and addresses in every response it returns — see "Connect an AI agent to the DoorSpot API" for the full picture.
Click Save. Your full key is shown only once, immediately after you create it — copy it right away and store it somewhere secure, like a password manager or your company's secrets vault.
Good to know
Grant the least access necessary — a reporting tool needs Read on Units and Reservations, nothing else; an accounting sync might need Read and Write on Invoices and Payments. Narrower permissions limit the damage if a key is ever compromised.
Never paste a key into an email, chat message, spreadsheet, or public code repository.
Hand the key off by pasting it into the other tool's DoorSpot/API field, or sending it securely to your developer. Every request needs it in an
Authorization: Bearer your_api_key_hereheader. Full request and response details live at api.doorspot.com/developer.
Manage an existing key
Click any key on the Settings > Developer page to open it. From there you can rename it or edit its permission scopes — changes apply immediately, without reissuing the key itself. There's no self-serve option to regenerate or revoke a key in the app today; if a key needs to be rotated or fully disabled, contact DoorSpot support.
Troubleshooting
Lost your key before copying it? You can't retrieve it after the fact. Create a new key with the same permissions and update it everywhere the old value was used, then contact DoorSpot support to have the old key disabled. Getting a 401 or 403 error? The key may be inactive or missing the permission the request needs — check Settings > Developer and confirm the resource's scope.