How to get a Nuki Web API token and connect your smart lock

Check-in Easy uses a Nuki Web API token to list your locks and create, update and revoke time-limited keypad codes. Nuki calls it an API token; it is the value you should paste into the API token field in Check-in Easy.

Create the token only through Nuki Web. It grants access to your locks, so never send it by email or paste it into an unknown website.

Before you start

• Your Nuki Smart Lock must be installed and visible in the Nuki app.
• Remote Access must work, either through built-in Wi-Fi, Thread or a Nuki Bridge.
• Nuki Web must be activated for the device.
• To generate guest PINs, pair a compatible Nuki Keypad with the lock.

1. Activate Nuki Web if you have not done so

In the Nuki app, select the lock and open Features & Configuration → Integrations → Nuki Web. Follow the instructions to create or link your Nuki Web account and verify it.

If you have several locks, make sure every lock you want to use appears in the same Nuki Web account.

2. Sign in to Nuki Web

Open web.nuki.io and sign in with the account that owns the lock. Check that the device is online and can be managed remotely before continuing.

3. Open the API section

Open the Nuki Web menu and go to API. In API tokens, choose Generate API token or the equivalent create-token action.

Do not use the OAuth API key or client ID: Check-in Easy expects the personal API token created in this section.

4. Name the token and grant only the needed rights

Use a recognizable name such as Check-in Easy. Enable the rights that allow the integration to:

• view the Smart Locks in your account (smartlock / smartlock.readOnly);
• view and manage lock authorizations or keypad codes (smartlock.auth).

Check-in Easy does not need a general lock/unlock permission merely to manage guest keypad codes. If Nuki shows descriptive permission names rather than scope codes, choose the equivalents for viewing devices and managing authorizations.

5. Generate and copy the token

Confirm the creation and copy the complete token immediately. Store it in a password manager until it has been added to Check-in Easy.

Nuki states that API tokens do not expire automatically, but changing the password of the associated Nuki Web account destroys them. If that happens, create a new token and update the integration.

6. Configure Nuki in Check-in Easy

In Check-in Easy, go to Integrations → Smart locks, add a Nuki integration and paste the token into Nuki Web API Token. Assign the property, retrieve the available locks and select the correct Smart Lock.

Save and run the connection test. If the lock appears but the keypad is unavailable, pair the keypad in the Nuki app and refresh the lock list.

If the connection test fails

• 401 / invalid token: copy the token again or generate a new one.
• 403 / insufficient rights: edit or recreate the token with device-reading and authorization-management rights.
• No locks found: verify Remote Access, Nuki Web activation and the account that owns the device.
• No keypad available: pair the keypad with that exact lock before refreshing Check-in Easy.

Revoke tokens you no longer use from Nuki Web. A token gives persistent access to every permission selected during creation.