# Where is the Allow\_user\_api\_key setting enabled?
**URL:** https://meta.discourse.org/t/allow-user-api-key/401671
**Category:** Support
**Created:** [April 28, 2026, 6:49am UTC](https://meta.discourse.org/t/allow-user-api-key/401671 "2026-04-28T06:49:07Z")
**Posts on this page:** 11
**Page:** 1
### Author:  [@Lxk520](https://meta.discourse.org/u/Lxk520)
#### Post date: [April 28, 2026, 6:49am UTC](https://meta.discourse.org/t/allow-user-api-key/401671/1 "2026-04-28T06:49:07Z")
Where can I enable the allow\_user\_api\_key setting?
---
### Author:  [@NateDhaliwal](https://meta.discourse.org/u/NateDhaliwal)
#### Post date: [April 28, 2026, 8:52am UTC](https://meta.discourse.org/t/allow-user-api-key/401671/2 "2026-04-28T08:52:28Z")
Can you confirm the setting name? The 2 closest ones I could find is `allow_user_api_key_scopes` and `allow_user_api_key_client_scopes`, and the 2nd setting is a [hidden site setting](https://meta.discourse.org/t/using-hidden-site-settings/308773).
---
### Author:  [@Lxk520](https://meta.discourse.org/u/Lxk520)
#### Post date: [April 28, 2026, 12:13pm UTC](https://meta.discourse.org/t/allow-user-api-key/401671/3 "2026-04-28T12:13:09Z")
Hello everyone,
I’m developing a mobile app that needs to authenticate users via the Discourse User API Key flow. I’m stuck at the very beginning because I cannot find the master switch for this feature.
I’ve already configured the allowed\_user\_api\_auth\_redirects setting. However, the allow\_user\_api\_key site setting is completely missing from my admin panel.
· What I did: I checked the “Show ignored settings” flag and searched for “allow\_user\_api\_key”, but nothing came up.
· My question: How can I enable the User API Key feature on my self-hosted Discourse site? Is it possible that this setting has been deprecated or moved? If so, what is the correct way to enable it?
Thank you for your help!
I’m trying to set up the user api key specification for my mobile app. The document says I need to enable the allow\_user\_api\_key site setting, but I’m unable to find it in the admin panel.
I’ve already done the following:
1. Checked the “Show ignored settings” checkbox.
2. Searched for “allow\_user\_api\_key”, “user\_api\_key”, and “api\_key”.
Could you please let me know if there’s any other way to enable this feature? Is it possible that this setting has been renamed recently?
My Discourse Version: [Please fill in your Discourse version here, e.g., v3.1.0
Is there
---
### Author:  [@NateDhaliwal](https://meta.discourse.org/u/NateDhaliwal)
#### Post date: [April 28, 2026, 12:16pm UTC](https://meta.discourse.org/t/allow-user-api-key/401671/4 "2026-04-28T12:16:49Z")
Hi there, could you share what document you are referring to? Thanks.
---
### Author:  [@rogerreed](https://meta.discourse.org/u/rogerreed)
#### Post date: [April 28, 2026, 12:30pm UTC](https://meta.discourse.org/t/allow-user-api-key/401671/5 "2026-04-28T12:30:38Z")
That setting is generally set in the server/app config, not in the UI, check your platform’s config file or admin settings where API/security options are defined. If you’re not sure, tell me what system you’re on and I can direct you to the exact spot
---
### Author:  [@Lxk520](https://meta.discourse.org/u/Lxk520)
#### Post date: [April 28, 2026, 12:59pm UTC](https://meta.discourse.org/t/allow-user-api-key/401671/6 "2026-04-28T12:59:41Z")
Thank you. My system is Ubuntu 24.4, this system.
---
### Author:  [@NateDhaliwal](https://meta.discourse.org/u/NateDhaliwal)
#### Post date: [April 28, 2026, 1:02pm UTC](https://meta.discourse.org/t/allow-user-api-key/401671/7 "2026-04-28T13:02:17Z")
Could you share the document you’re referring to? Thanks.
---
### Author:  [@Lxk520](https://meta.discourse.org/u/Lxk520)
#### Post date: [April 28, 2026, 1:04pm UTC](https://meta.discourse.org/t/allow-user-api-key/401671/8 "2026-04-28T13:04:24Z")
What document? The documents I’m referring to are the posts you see in the community.
---
### Author:  [@NateDhaliwal](https://meta.discourse.org/u/NateDhaliwal)
#### Post date: [April 28, 2026, 1:07pm UTC](https://meta.discourse.org/t/allow-user-api-key/401671/9 "2026-04-28T13:07:34Z")
I see. Have you seen this?
> [@User API keys specification](https://meta.discourse.org/t/user-api-keys-specification/48536):
>
> Discourse contains a system for generating API keys per user if a very specific protocol is followed. This feature facilitates “application” access to Discourse instances without needing to involve moderators. High level description At a high level: Client (desktop app, browser plugin, mobile app) generates a private/public key pair and return url Client redirects to a route on discourse giving discourse its public key Discourse gets approval from user to use app Discourse generat…
---
### Author:  [@Lxk520](https://meta.discourse.org/u/Lxk520)
#### Post date: [April 28, 2026, 1:25pm UTC](https://meta.discourse.org/t/allow-user-api-key/401671/10 "2026-04-28T13:25:18Z")
Thank you, you have cleared up my doubts. Thank you so much, I’m very grateful.
---
### Author:  [@darkpixlz](https://meta.discourse.org/u/darkpixlz)
#### Post date: [April 28, 2026, 1:26pm UTC](https://meta.discourse.org/t/allow-user-api-key/401671/11 "2026-04-28T13:26:38Z")