Create an API key
Create a secret for one organization and one integration.
Last updated · Oct 23, 2026
Before you start
Sign in as an owner or administrator and select the correct organization. An API key grants machine access, not a team member session. Never put a secret key in a widget snippet, browser bundle, public repository or mobile app.
Create and save
Open Settings → API keys. Give the key a recognizable integration name, choose only the required scopes and an expiry date, then create it. Copy the secret immediately into your server’s secret manager: it is shown only once. The key list shows metadata, never the full secret.
Use the key in the Authorization header, not in a URL or query string. Use HTTPS. Keep development and production keys separate. Try your first request.