All API keys submitted to FactOS are securely funneled into the Custom API Key Vault. Keys are symmetrically encrypted instantly upon receipt using military-grade AES-256-CBC encryption. The raw key is never stored in plaintext within our database.
FactOS utilizes a shared key pool architecture to drastically reduce the burden on individual keys. Instead of using your specific key to fetch your specific data, the system intelligently balances the load across all available keys within your faction, ensuring no single key hits the daily Torn API limits.
Because FactOS is a comprehensive, data-rich ecosystem, it strictly requires a Custom API Key with a specific set of granular permissions. This ensures the system can perform advanced combat logging, automated Discord pings, and intelligent Organized Crime payout tracking without requiring Full Account Access.
Any keys that are not Custom Keys, or Custom Keys missing required permissions, will be rejected by the authentication pipeline.
You may revoke or regenerate your API key on Torn.com at any time. FactOS will detect the invalidation and pause automated tracking for your account until a new key is provided.