← All guides

API keys & scripts

Torn allows limited tooling through the official API. It does not allow bots that play the game for you. Waypoint only reads status from api.torn.com. Every action still happens under your clicks in Torn.

Key hygiene

• Prefer Limited keys with only needed selections
• Never paste keys in public chats or screenshots
• Revoke and replace leaked keys

Hard no’s

• Auto-attack, auto-travel, auto-crime
• Anything that clicks Torn without you
• Tools that promise to fully automate levelling or flying

Faction tools

Spreadsheets and Discord bots that need a key can be legitimate. Still ask what permissions they need, who sees the data, whether Limited is enough, and whether the tool is widely trusted.