01 / Tools and operations / F.06How it works
F.06

API key expiry tracking

See every key the panel uses to reach your servers, when it was last used and how many days it has left. A key that is running out comes to you as an alert, so you can plan the renewal before metrics stop. Creating and revoking keys from this screen is still being built.

Screen sheetF.06
Topic
F · Tools and operations
Order
06 / 08
Points
05
02 / FigurePanel screen
Hover the numbers
app.ctapanel.com/settings/api-keysSettings · API keys5 keys · 1 criticalGeneralTeamAPI keysServerLabelLast usedTime leftStateweb01.frawhm-agent12 min ago214 daysvalidweb02.frawhm-agent8 min ago26 daysfindingweb01.amsplesk-agent3 min ago9 dayscriticalrs01.nycda-agent21 min ago180 daysvalidbak01.ashssh-key5 min agono expiryvalidA key with under 30 days left becomes a security finding, and under 14 days it turns critical.The finding links straight to that server.Like the root password, the key itself is never shown: only its label, last use and expiry are kept.Creating and revoking keys are on the way. Today listing and expiry tracking work.0102030405
  1. 01Its own settings tabThe key list has its own tab on the settings screen.
  2. 02One key per serverEach server’s agent key sits in its profile: label, last use and time left.
  3. 0330- and 14-day thresholdsUnder 30 days left is a security finding, under 14 it turns critical; the finding links to that server.
  4. 04The key stays hiddenLike the root password, the key itself is never shown; only its label, last use and expiry are kept.
  5. 05Create and revoke: comingCreating and revoking keys are on the way; listing and expiry tracking work today.
Fig. 02 — API key expiry tracking
03 / What it does5 points

What it does.

When a key expires the server keeps running, but the panel goes blind. Metrics stop, alerts don’t arrive, and you usually hear about it from a customer. The list counts down the days left, so you can schedule the renewal instead of scrambling. Like the root password, the key itself is never shown on screen. Creating and revoking keys are on the way.

  1. Each server’s agent key sits in its profile with its label, last use and expiry.

  2. Under 30 days left, a key becomes a security finding; under 14 days, it turns critical.

  3. The finding links to the server list, so you reach the server behind the key in one click.

  4. The key list has its own tab in settings.

  5. Like the root password, the key itself is never shown on screen.

04 / Tools and operations8 screens

Tools and operations

Tools that make the daily work easier and leave a trail.

05 / Get started14 days free · No card needed

Connect your first server today.

Free for 14 days, no card needed. Create your account, add your first server with an API token or an SSH key, and the panel starts filling in a few minutes later.

No setup fee · Cancel anytime · EU-hosted