Get started
Work with API keys
Give your server a secure connection to your sending workflow.
Create a key for your application
Create a key in your workspace and give it a descriptive name. Use separate credentials for separate environments when your sending service supports them.
Keep the key on your server
Store the key in an environment variable or secrets manager. Do not paste it into browser-side code, a public repository, screenshots, or support messages.
Authenticate a request
The example API uses the Authorization header with a Bearer token. Replace the example value on your server with your actual credential. Confirm the live API’s authentication format before production use.
Rotate an exposed key
If a key is exposed, revoke it and create a replacement. Update your application’s environment and redeploy it with the new credential. Check the affected application’s activity.