> ## Documentation Index
> Fetch the complete documentation index at: https://docs.ticktock.bet/llms.txt
> Use this file to discover all available pages before exploring further.

# Client Portal

> Self-service portal for managing API keys, market access, and delivery credentials

## Overview

The **Client Portal** at `https://ticktock.bet/client/login` is your self-service control panel for everything related to your integration:

* Generate and rotate **API keys** for feed access
* Enable or disable specific **market types** for your operator account
* Manage **2FA** security for your account
* View your **delivery credentials** for REST API and AMQP

## Accessing the Portal

### Login

Navigate to `/client/login` and enter the username and password provided during onboarding.

```
URL: https://ticktock.bet/client/login
```

If your account includes two-factor authentication (2FA), you will be prompted for a TOTP code after entering your password.

### First Login (Invite Flow)

New operator accounts receive an email invite with a one-time link. Click the link to set your initial password — the link expires after 72 hours. Contact [b2b@ticktock.bet](mailto:b2b@ticktock.bet) if you need a new invite.

## API Keys

Your API key is the credential used to authenticate all requests to the Odds Feed REST API.

<Steps>
  <Step title="Navigate to API Access">
    Go to **API Access** in the portal sidebar.
  </Step>

  <Step title="Create a key">
    Click **New API Key**, enter a label, and optionally specify IP allowlist entries (comma-separated IPs or CIDR ranges).
  </Step>

  <Step title="Save the key immediately">
    The raw key value is shown **once** — copy and store it securely. It cannot be retrieved again.
  </Step>
</Steps>

### Key Format

```
vbk_<24-char-random>
```

### Using the Key

Pass it in the `X-API-Key` header on every REST request, or as `?api_key=` on WebSocket handshakes:

```http theme={null}
GET /cs2/v1/matches
Host: ticktock.bet
X-API-Key: vbk_your-api-key-here
```

Verify which scopes the key carries with `GET /v1/whoami`.

### Key Rotation

To rotate a key:

1. Open **API Access** → click **Rotate** next to the key
2. Save the new key immediately — the old key is invalidated at once

### IP Allowlist

Optionally restrict a key to specific IPs. Any request from an IP not on the list will be rejected with `403 Forbidden`. Leave empty to allow all IPs.

## Market Access

By default, all available market types are enabled for your account. Use the **Markets** page to:

* Toggle individual market types on/off
* Set a per-account default (enable all / disable all, then selectively override)

Changes take effect immediately for all new feed responses.

<Note>
  Disabling a market type does not settle or void outstanding bets — it only stops the market from appearing in future feed responses for your tenant.
</Note>

## Delivery Credentials

### REST API

REST endpoints use your API key (see above). Pass it in the `X-API-Key` header on every request.

### AMQP Messaging Feed

AMQP credentials (vhost, username, password) are provisioned by the Ticktock team and provided separately. They are **not** managed through the portal UI — contact [b2b@ticktock.bet](mailto:b2b@ticktock.bet) to request AMQP access.

Once you have AMQP credentials:

```
amqp://op-<slug>:<password>@mq.ticktock.bet:5672/<slug>
```

See [Messaging Feed](/odds-feed/amqp) for connection details, routing keys, and message format reference.

## Security

### Two-Factor Authentication (2FA)

TOTP-based 2FA is available for all portal accounts:

1. Go to **Profile** → **Enable 2FA**
2. Scan the QR code with your authenticator app (Google Authenticator, Authy, etc.)
3. Enter the 6-digit code to confirm setup

Once enabled, 2FA is required on every login.

### Change Password

Go to **Profile** → **Change Password**. You must provide your current password to set a new one. Minimum 8 characters.

### Session

Portal sessions expire after 12 hours. You will be redirected to the login page on expiry.

## Getting Help

* Email: [b2b@ticktock.bet](mailto:b2b@ticktock.bet)
* For onboarding, credentials, or access issues — contact your Ticktock account manager