Skip to main content
PCI Booking allows multiple users per account. Each user has their own permissions and up to 5 API keys.

​
Users

When your account is created, it has one administrator user. You can add more users as needed.

​
View Users

  1. Log in to the PCI Booking portal.
  2. Navigate to Account Settings > View Accounts.
  3. The list shows all currently active users. Check Show closed to include deactivated users.
  4. Click a user row to edit their information, permissions, and relay restrictions.

​
Add a User

  1. Navigate to Account Settings > Add Account.
  2. Fill in the required fields:
    • User ID (must be unique within the account)
    • Temporary Password (the user receives an email to change it on first login)
    • Email, Name, Phone
  3. Assign permissions based on the user’s role:
    • Messaging - send and receive PCI messages
    • Tokenization - tokenize card data
    • Retrieve cards - retrieve and relay card data to third parties. Consider setting up relay restrictions for this permission.
    • Property management - manage properties (legacy - the Property Management system is retired)
    • System configurator - configure account settings
Permissions are granted at this coarse level only - there is currently no way to create a key scoped to a single endpoint or narrower action (e.g. a stylesheet-only key, or a key that can tokenize but not retrieve cards within the Tokenization permission). If you need to isolate a specific integration’s blast radius more tightly than these categories allow, create a separate user for it and grant only the permissions it needs from the list above, or use a sandbox account/key for lower-stakes integrations.

​
API Keys

Each user can have up to 5 API keys. All authentication methods are based on API keys.

​
Generate a New API Key

  1. Navigate to Account Settings > Account Settings.
  2. Under the API Access section, click Generate API Key.
  3. Enter a name for the key (useful when managing multiple keys).
  4. The API key is displayed.
Copy and store the API key immediately. Once you close the dialog, you cannot view the key again. If you lose a key, you must generate a new one.

​
Delete an API Key

  1. Find the key in the API keys list.
  2. Click the delete icon.
  3. Confirm deletion.
Deleting an API key cannot be undone. Make sure the key is no longer in use before deleting it.

​
Verify an API Key

Use the Authenticate endpoint to check if an API key is valid.