Key Format
API keys use the prefixsk_live_ followed by a random string:
Creating an API Key
Using an API Key
Include the key in theX-API-Key header:
Managing Keys
From Settings > API Keys, you can:- View all keys — See key names, creation dates, status, and last-used timestamps
- Revoke a key — Disable a key. This takes effect immediately.
- Delete a key — Permanently remove a revoked key.
Revoking a key is immediate. Any integrations using the revoked key will stop working right away.
Best Practices
- Use descriptive names so you know what each key is for
- Rotate keys regularly — create a new key, update your integrations, then revoke the old one
- Use one key per integration — this way you can revoke access for a single integration without affecting others
- Monitor last-used timestamps — keys that haven’t been used recently may be stale and should be revoked