# Where is the Allow\_user\_api\_key setting enabled?

**URL:** https://meta.discourse.org/t/allow-user-api-key/401671
**Category:** Support
**Created:** [April 28, 2026, 6:49am UTC](https://meta.discourse.org/t/allow-user-api-key/401671 "2026-04-28T06:49:07Z")
**Posts on this page:** 1
**Showing post:** 2

<div class="post-metadata">

### Author: ![NateDhaliwal](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/natedhaliwal/32/313494_2.png) [@NateDhaliwal](https://meta.discourse.org/u/NateDhaliwal)
#### Post date: [April 28, 2026, 8:52am UTC](https://meta.discourse.org/t/allow-user-api-key/401671/2 "2026-04-28T08:52:28Z")

</div>

Can you confirm the setting name? The 2 closest ones I could find is `allow_user_api_key_scopes` and `allow_user_api_key_client_scopes`, and the 2nd setting is a [hidden site setting](https://meta.discourse.org/t/using-hidden-site-settings/308773).

---

_[View the full topic](https://meta.discourse.org/t/allow-user-api-key/401671)._