• API >
• Configure Atlas API Access

Configure Atlas API Access

To access the API, you must generate your own API key.

To access whitelisted API operations, you must configure your API whitelist with the IP addresses you will use when issuing the whitelisted commands. You also must have the Owner role to issue whitelisted commands.

For a description of the Atlas API’s principles and conventions, see the API.

Generate API Keys

To access the Atlas API, you must generate an API key, which gives access to the API. Each user that will use the API must generate a key. You can have up to ten API keys associated with your account. Each key can be either enabled or disabled but all count toward the ten-key limit.

An API key is like a password. Keep it secret.

When accessing Atlas through the API, you have the same level of access as you do through the Atlas interface. Your Atlas roles apply to both the interface and the API.

Important

When you generate a key, Atlas displays it one time only. You must copy it. Atlas will never display the full key again.

1. On the upper-right hand corner, click on your user name and select Account. Click on Public API Access.

2. In the API Keys section, click Generate.

3. Type a description and click Generate.

4. If prompted for two-factor authentication, enter the code and click Verify. Then click Generate again.

5. Copy and record the key.

   Copy the key immediately. Atlas displays the full key one time only. You will not be able to view the full key again.

   Record the key in a secure place. After you record the key, click Close.

Provide Access to Whitelisted API Operations

Address-based whitelists protect certain API operations. Only client requests that originate from a whitelisted IP address are permitted to perform the operations. To perform whitelisted operations, you must add at least one address to your whitelist.

Users have their own whitelists and own API keys. When you issue an API call, you must use an API key from your user account and must issue the command from an address on your user account’s whitelist. You cannot use your key to issue a whitelisted API request from an address on another user’s whitelist, unless, of course, you’ve added that address to your own whitelist.

On the resources pages in this guide, whitelisted operations are marked as such.

1. On the upper-right hand corner, click on your user name and select Account. Click on Public API Access.

2. In the API Whitelist section, click Add.

3. Enter an IP address or CIDR range. To add multiple entries to your whitelist, repeat this step. If you leave your whitelist empty, you have no access to whitelisted operations.

   You can enter any of the following:

   Entry	Grants
   An IP address	Access to whitelisted operations from that address.
   A CIDR-notated range of IP addresses	Access to whitelisted operations from those addresses.
   0.0.0.0/0	Unrestricted access to whitelisted operations.

Delete an Address from the API Whitelist

1. On the upper-right hand corner, click on your user name and select Account. Click on Public API Access.
2. In the Whitelist section, click the address’s gear icon and select Delete.

←   API API Resources  →

© MongoDB, Inc 2008-present. MongoDB, Mongo, and the leaf logo are registered trademarks of MongoDB, Inc.