Managing API Keys

Managing API Keys

API keys provide programmatic access to your organization's data. Manage them carefully to maintain security.

Generating a New Key

1. Go to Settings → API
2. Click "Generate New Key"
3. Give the key a descriptive name (e.g., "Website Integration", "Analytics Dashboard")
4. Click "Create"
5. Copy the key immediately — it will only be displayed once

Viewing Active Keys

The API settings page lists all active keys with their name, creation date, and last-used timestamp. You cannot view the full key value after creation, only the last 4 characters.

Revoking a Key

1. Find the key in the active keys list
2. Click "Revoke"
3. Confirm the revocation in the dialog

Revoked keys stop working immediately. Any integration using that key will receive 401 Unauthorized responses.

Security Best Practices

• Use separate keys for different integrations so you can revoke one without affecting others
• Store keys in environment variables, never in source code
• Rotate keys periodically (e.g., every 90 days)
• Revoke keys for integrations you no longer use