Application keys
Bucketree can create, inspect and revoke B2 application keys without sending you to a browser. Press ⌘3, or choose Application Keys in the sidebar.
Making a key
File → New Application Key, or the + button.
Choose what it can do from four presets rather than ticking twenty-three capabilities:
| Preset | What it allows |
|---|---|
| Read only | Browse and download. Cannot upload, delete or change anything. |
| Read and write | The above, plus uploading and deleting files. |
| Full control | Everything, including managing buckets and other keys. |
| Custom | Choose each permission individually. |
Presets exist because a list of every capability, all equal, is how everyone ends up ticking all of them. That is the habit the feature exists to break.
Scope it to one bucket if it only needs one. A key that reaches every bucket, including buckets you make next year, is worth avoiding when it costs one click not to.
The secret is shown once
When B2 creates a key it returns the applicationKey exactly once. No listing
ever returns it again, and Bucketree cannot show it to you later: it stores the
key in order to use it, not in order to display it.
So the confirmation window will not let you leave until you have copied it or said plainly that you have saved it somewhere. If you lose it, the only remedy is to delete the key and make another.
A key cannot grant more than its creator
If you are signed in with a read-only key, Bucketree cannot make you a key that can delete things. Where your choice would exceed what your own key holds, the form says so and narrows the result rather than sending a request B2 will reject.
Key details
Select a key and press ⌘I, or double-click it. Every field B2 holds is there: what it permits in full, which buckets it can reach, any name prefix, an expiry if it has one, and whether Bucketree holds its secret.
B2 has no way to change a key. To grant more or less than it has, make a new one and delete this one.
Revoking
Select a key and press the trash button. It takes effect immediately, and anything still authenticating with that key stops working at once.
The key Bucketree is currently signed in with cannot be selected, so it cannot be deleted by accident.