Your API keys carry many privileges. Be sure to keep them secure! Do not share your API keys in publicly accessible areas such as GitHub or client-side code.
Creating API Keys
To create a new API key:- Navigate to the Dashboard
- Go to Settings → API Keys
- Click “Create New API Key”
- Name your key and select the appropriate permissions
- Copy and securely store your API key - you won’t be able to see it again!
Managing API Keys
View Active Keys
You can view all your active API keys in the Dashboard under Settings → API Keys. For each key, you can see:- Key name
- Creation date
- Last used date
- Permissions
Rotating Keys
We recommend regularly rotating your API keys as a security best practice:- Create a new API key
- Update your applications to use the new key
- Delete the old key
Revoking Keys
To revoke an API key:- Go to Settings → API Keys
- Find the key you want to revoke
- Click “Revoke Key”
- Confirm the action
Revoking an API key immediately invalidates it. Make sure you’ve updated your applications before revoking old keys.
Best Practices
Security Tips
- Never share API keys in public repositories
- Use environment variables to store keys
- Implement key rotation regularly
- Grant minimal required permissions
- Monitor key usage for unusual activity