How to rotate and delete your TaxJar API keys

You can manage and rotate API keys directly in the TaxJar Dashboard. Create a new key, update your integration, and delete old keys when you no longer need them.

Important: API keys provide access to your TaxJar integration. Keep them secure. Do not share them in public locations, code repositories, or support tickets.

Before you begin

API keys are managed separately in the Live and Sandbox environments.
You can have up to three API keys in each environment at one time.
Deleting an API key is permanent and cannot be undone.
Before deleting a key, update every integration, plugin, or application that uses it.

Rotate API keys

Rotating an API key lets you replace a key while keeping your integration configured with an active key.

Open API key settings

Sign in to the TaxJar Dashboard.
Select Account in the upper-right corner.
Select TaxJar API.

The API key management page opens.

Select the environment whose API keys you want to manage:

(NOTE: In the Dashboard, API keys are labeled as tokens)

Live Tokens: Use these keys for production integrations and live transactions.

Sandbox Tokens: Use these keys for development, testing, and staging environments.

Each tab displays only the keys created for that environment.

Create a replacement API key

Select the appropriate environment: Live Tokens or Sandbox Tokens.
Select Create token.

Confirm that the new key appears in the token list. A confirmation message appears after the key is created.

Copy and update your API key

Find the new key in the Token column.
Select the token value to copy it to your clipboard.

Paste the new key into your integration, plugin, or application configuration.
Confirm that the updated integration is working before deleting the previous key.

Each key entry also displays:

Created: The date the token was generated.
Last used: The most recent time the key was used. If the key has not been used, this may display.

Actions: Available actions for the key, including Delete.

API key limits

You can have up to:

3 Live API keys
3 Sandbox API keys

When you reach the three-key limit in an environment, the Create token button is disabled.

When you reach the three-key limit in an environment, the Create token button is disabled. Delete an unused key in that environment before creating another one.

For a standard rotation, keep the old key active while you create and validate the new key. Delete the old key after you update every affected integration.

Deleting API keys

Locate the old key you want to remove.
Select Delete in the Actions column.

Review the confirmation dialog.
Complete any required acknowledgments.
Select the red Delete button to permanently remove the key.

Deletion Safeguards

TaxJar provides additional warnings to help prevent accidental disruption.

Deleting a recently used key

If a key was used within the last 24 hours, you must acknowledge its recent activity before you can delete it.

Select the required checkbox, such as:

I understand the API token was used 7 hours ago.

Then select Delete.

Caption: This warning helps ensure you do not accidentally remove a key that may still be in use.

Deleting your last API key

If you attempt to delete the last remaining API key, TaxJar requires an additional acknowledgment:

I understand that doing this will REMOVE ALL API ACCESS until a new one is generated.

If the key was also used within the last 24 hours, you must acknowledge both warnings before Delete becomes available.

Troubleshooting

I cannot create a replacement API key

You may have reached the three-key limit for the selected environment. Delete an unused key, then create the replacement key.

I deleted a key before updating my integration

Create a new API key, copy it, and update the affected integration, plugin, or application with the new key.

The Delete button is unavailable

Review the confirmation dialog and select all required acknowledgment checkboxes. The final Delete button remains unavailable until you acknowledge every applicable warning.