The Developers dashboard
Manage API keys, webhook endpoints and request logs for your organisation in Developers — what each screen shows and who can use it.
For developersLast updated
On this page
Developers (/developers) is where your organisation's API keys, webhook endpoints and API usage live. Open it from Developers in the sidebar (on a phone, it's under More).
It has four tabs — Overview, API keys, Webhooks and Logs — and an API docs link at the top right. Everything you see belongs to the organisation you're currently working in; switch organisations to manage another one's keys.
Who can use it#
Only organisation owners and admins see Developers. API keys and webhooks can read and act on your organisation's orders and customers, so other members who open the page see "Developer settings are for owners and admins" and are asked to have an owner create a key for them or change their role in Settings → Team. See organisations and team.
There are two ways your organisation gets a key:
| Self-serve | Issued by ShowTix | |
|---|---|---|
| Who creates it | An owner or admin, in API keys → Create key | ShowTix staff, on request |
| How it looks in your list | Normal row | Issued by ShowTix badge next to the name |
| Rate limit | Default — 120/min live, 60/min test | Can carry a custom limit (e.g. for a big on-sale) |
| Edit, roll, revoke | Yes | Yes |
Email support@showtix.com.au if you need a higher rate limit.
Overview#
A health summary for the last 24h, 7d or 30d:
Requests, Error rate, p95 latency, Webhook success and Active keys tiles.
Charts of API requests (successful vs errors), Responses by status with Top endpoints, Latency (p95) and Webhook deliveries (delivered vs failed).
Usage by key — requests, errors and last use for each key.
Recent API errors and Recent failed deliveries, so problems are visible at a glance.
A new organisation also sees a three-step checklist — Create a test key, Make your first request, Listen for webhooks — and a Quick start curl command with the base URL for your environment.
API keys#
The list shows each key's Name (with its prefix and last four characters), Mode, Permissions, Last used, 24h requests and Status (Active, Expiring, Expired or Revoked). Use Active / All to show or hide revoked and expired keys.
Create a key#
Select Create key.
Give it a Name you'll recognise (e.g. "Venue website").
Choose a Mode — Test reads real data but dry-runs every write; Live makes real holds, orders and check-ins.
Tick the Permissions it needs (or Select all). See scopes.
Optionally add an IP allowlist — IPs or CIDR ranges, comma-separated.
Select Create key, then copy the secret from Copy your secret key now. It's the only time the full key is shown.
Manage a key#
Open a key's actions menu:
Edit — change the name, permissions or IP allowlist. The mode can't be changed.
Roll key — get a new secret and choose when the old one stops working (Now, 1 hour, 24 hours, 3 days or 7 days). See rolling a key.
Revoke — stops the key immediately; every request with it then fails with
api_key_revoked. This can't be undone.
Webhooks#
The list shows each endpoint's URL, status (Enabled, Failing or Disabled), mode and recent delivery health.
Add an endpoint#
Select Add endpoint.
Enter the Endpoint URL (HTTPS) and an optional Description.
Choose a Mode — Live receives real events as they happen; Test only receives test events you send from the dashboard.
Under Events to send, turn on All events (includes types added in future) or pick types. See the event catalogue.
Select Add endpoint and copy Your signing secret — you need it to verify signatures. You can reveal it again later from the endpoint page.
Each row's actions menu has Send test event, Disable / Enable, Rotate secret (the old secret keeps signing for 24 hours) and Delete (stops deliveries and cancels pending retries).
Endpoint page#
Select an endpoint to open /developers/webhooks/<id>:
Send test event, Edit and Disable / Re-enable buttons. Re-enabling resets the failure count; if the endpoint was disabled automatically, the reason is shown at the top.
Status, Last 24h, Last success, Last failure and Consecutive failures.
Signing secret with Reveal / Hide, and the subscribed Events.
Deliveries — every attempt, filterable by All, Succeeded, Failed and Retrying, with the Event, Status, Response, Latency, Attempt and when it was Sent. Resend any delivery from its row.
Select a delivery to see its details, the exact Request headers and Request body ShowTix sent, and the start of your server's Response.
Logs#
Every call to the Partner API, newest first, with its Status, Request (method and path, plus the error code if it failed), Key, Latency, IP and Time. Filter by key (All keys or one key) and by result (All, Succeeded, Errors). Select a row to see its Request ID — quote it when you contact ShowTix support.
Logs, like webhook deliveries, are kept for 30 days.
Was this article helpful?