Shortcut

Overview

Use Shortcut credentials to make authenticated API calls through Alter Vault without exposing API keys in code.

Property	Value
Provider ID	shortcut
Category	Productivity
Credential Type	API Key

Step 1: Get Credentials

Log in to Shortcut

Log in to Shortcut at app.shortcut.com.

Go to Settings → Account → API Tokens

Go to Settings → Account → API Tokens at app.shortcut.com/settings/account/api-tokens.

Generate a token

Click ‘Generate Token’.

Copy your token

Copy the generated API token.

Warning

Never share credentials publicly. Store them securely and only enter them in the Alter Vault Developer Portal.

Step 2: Add to Alter Vault

Open the Developer Portal

Go to portal.alterauth.com and navigate to the application.

Add Shortcut

Go to Managed Secrets > Add Provider > Shortcut.

Enter credentials

Paste your API Token into the credential field.

Save

Click Save. You’ll receive a grant_id to use with the SDK.

Using in Code

response = await alter_app.request(
    HttpMethod.GET,
    "https://api.app.shortcut.com/api/v3/stories",
    grant_id="YOUR_GRANT_ID",
)

Policy-cataloged operations

Alter policy rules can target these attested operations and families for operation-level and parameter-aware controls.

Operation ID	Families	Method	Provider path
createEpicComment	send	POST	/api/v3/epics/{epic-public-id}/comments
createEpicCommentComment	send	POST	/api/v3/epics/{epic-public-id}/comments/{comment-public-id}
createStoryComment	send	POST	/api/v3/stories/{story-public-id}/comments
createStoryReaction	send	POST	/api/v3/stories/{story-public-id}/comments/{comment-public-id}/reactions
unlinkCommentThreadFromSlack	send	POST	/api/v3/stories/{story-public-id}/comments/{comment-public-id}/unlink-from-slack
updateEpicComment	send	PUT	/api/v3/epics/{epic-public-id}/comments/{comment-public-id}
updateStoryComment	send	PUT	/api/v3/stories/{story-public-id}/comments/{comment-public-id}
deleteCategory	delete	DELETE	/api/v3/categories/{category-public-id}
deleteCustomField	delete	DELETE	/api/v3/custom-fields/{custom-field-public-id}
deleteDoc	delete	DELETE	/api/v3/documents/{doc-public-id}
deleteEntityTemplate	delete	DELETE	/api/v3/entity-templates/{entity-template-public-id}
deleteEpic	delete	DELETE	/api/v3/epics/{epic-public-id}
deleteEpicComment	delete	DELETE	/api/v3/epics/{epic-public-id}/comments/{comment-public-id}
deleteFile	delete	DELETE	/api/v3/files/{file-public-id}
deleteGenericIntegration	admin, delete	DELETE	/api/v3/integrations/webhook/{integration-public-id}
deleteIteration	delete	DELETE	/api/v3/iterations/{iteration-public-id}
deleteLabel	delete	DELETE	/api/v3/labels/{label-public-id}
deleteLinkedFile	delete	DELETE	/api/v3/linked-files/{linked-file-public-id}
deleteMilestone	delete	DELETE	/api/v3/milestones/{milestone-public-id}
deleteObjective	delete	DELETE	/api/v3/objectives/{objective-public-id}
deleteProject	delete	DELETE	/api/v3/projects/{project-public-id}
deleteStory	delete	DELETE	/api/v3/stories/{story-public-id}
createGenericIntegration	admin, write	POST	/api/v3/integrations/webhook
createGroup	admin, write	POST	/api/v3/groups
updateGroup	admin, write	PUT	/api/v3/groups/{group-public-id}
updateKeyResult	admin, write	PUT	/api/v3/key-results/{key-result-public-id}
createCategory	write	POST	/api/v3/categories
createDoc	write	POST	/api/v3/documents
createEpicHealth	write	POST	/api/v3/epics/{epic-public-id}/health
createObjectiveHealth	write	POST	/api/v3/objectives/{objective-public-id}/health
createTask	write	POST	/api/v3/stories/{story-public-id}/tasks
updateFile	write	PUT	/api/v3/files/{file-public-id}
updateLinkedFile	write	PUT	/api/v3/linked-files/{linked-file-public-id}
updateTask	write	PUT	/api/v3/stories/{story-public-id}/tasks/{task-public-id}
getEpicComment	read	GET	/api/v3/epics/{epic-public-id}/comments/{comment-public-id}
getFile	read	GET	/api/v3/files/{file-public-id}
getLinkedFile	read	GET	/api/v3/linked-files/{linked-file-public-id}
getStoryComment	read	GET	/api/v3/stories/{story-public-id}/comments/{comment-public-id}
getTask	read	GET	/api/v3/stories/{story-public-id}/tasks/{task-public-id}
listEpicComments	read	GET	/api/v3/epics/{epic-public-id}/comments