Less admin.
More faction.
War expenses, bounty reimbursements and member payouts, all in one place.
Connect your account
Sign in securely using your Torn API key.
New to XenoTools? We recommend creating a Custom API key.
Create yours here ↗
Know what you’re sharing.
Your key is encrypted until you remove it. Your Torn ID remains in the account record after key removal; account deletion is not available yet.
Your key is never shared with factions or other services. XenoTools operators can access account and permission data to run the service. Sign-in does not access faction data.
We verify your identity, check key permissions and fetch your name only when allowed. You can import your personal bounty history when your key permits it.
Sent to XenoTools and Torn over HTTPS for verification, then encrypted at rest with AES-256-GCM. The application can decrypt it for Torn calls; it never enters a URL, browser storage or session cookie.
Any valid Torn API key, including Public Only, can sign in. Bounty access checks require a Custom key with user log permission and Torn log category/type lookups.