Skip to main content
This page describes the settings available on the General Settings page of the Tyk Developer Portal.

API Product Access Flow

Select which flow developers will use when requesting access to APIs on the portal.
  • Direct access flow (recommended): Developers request access to each API product directly, without using a cart.
  • Cart-based flow: Developers can add multiple API products to a cart and request access in a batch.

Portal Visibility

Set one of the following visibility options for the portal.
  • Public: Your portal is visible to anyone.
  • Private: Your portal is only visibile to logged in members.
  • Hidden: Your portal is hidden from external API consumers, only visible to portal admins.

API Consumer access

Configure access for external API consumers.
  • Enable API consumers to register to the portal
  • Enable API consumers to sign-in to the portal
  • Auto-approve API consumers registering to the portal
  • Enable API consumers to register organisations
  • Auto-approve API consumers registering organisation

Portal admin notification address

Configure the email address to which notifications for admin will be sent.
  • Portal admin email: The email address for admin notifications.

Portal notification

Configure the portal Credential expiration notifications.
  • Send email notification when a credential is expired.
  • Number of days before a credential expires to send a notification email

Email subjects

Edit the email subject on the following emails.
  • Default Email From
  • Reset password email - subject
  • Approve access request - subject
  • Reject access request - subject
  • Developer registration approval request - subject
  • Invite new admin user - subject
  • Activate user - subject
  • Deactivate user - subject
  • Invite new user to a consumer organisation - subject
  • New organisation registration request - subject
  • Approve organisation registration request - subject
  • Reject organisation registration request - subject
  • Welcome email for admins - subject
  • Welcome email for developers - subject

SMTP

  • SMTP Host
  • SMTP Port
  • SMTP User
  • SMTP Pass

Password settings

Configure password settings.
  • Password history: Set a maximum number of previous passwords used by a user that cannot be reused. 0 means no history is kept so passwords can be reused.
  • Minimum password length: Minimum number of characters in a password. 0 means no minimum length is enforced.
  • Minimum numeric characters: Minimum number of numeric characters in a password. 0 means no minimum number of numeric characters is enforced.
  • Minimum special characters: Minimum number of special characters in a password. 0 means no minimum number of special characters is enforced.
  • Require at least one uppercase letter and one lowercase letter.
  • Disable passwords which include at least 3 sequential characters

Login settings

Configure login failure settings.
  • Username failure limit: Number of failed login attempts allowed before blocking a username. 0 means no limit is enforced.
  • IP failure limit: Number of failed login attempts allowed before blocking an IP address. 0 means no limit is enforced.
  • Login failure expiration (seconds): Number of seconds before a failed login attempt is reset. 0 means no expiration is enforced.
  • Login failure counting period (seconds): The time window in seconds during which login failures are counted. For example, if set to 300 seconds (5 minutes), only failures within the last 5 minutes are counted. 0 means no failures are counted.
  • Hide login failure limit error: Hide the login failure limit error message from the user. This is useful if you want to hide the login failure limit error message from the user.
  • Log failed login attempts: Log failed login attempts to the system logs. This is useful if you want to track failed login attempts.

robots.txt Settings

Manage the content of the robots.txt file served at /robots.txt. By default, all crawling is disallowed unless changed here. This file tells search engines which parts of your site to crawl or avoid.
  • robots.txt (Search Engine Instructions): The content of the robots.txt file.