Authenticate Requests

Use API Keys to authenticate your requests.

What is an API Key ?

API Keys are secret tokens used to authenticate your requests. They are unique to your application and should be kept confidential.

❗️

Application scoped keys

When using methods, you should use API Keys belonging to the same Application as the Account you are targeting.

Go to API Usage to learn more about request authentication.



Create an API Key

To create an API Key:

  • Go to the API Keys tab of the Dashboard
  • Click on Create API Key
  • Specify a name and an Expiration date
  • Click on Create
  • Keep the given token in a secure place in your code, you won't be able to see it again.

❗️

Security concerns

Make sure your token is stored in private space. Do not expose it client-side.

Anyone with this key can access data of every connected account on behalf of the owners.

If a token has leaked, you can delete it to revoke access to anyone using it.



Expiration

API Keys have an expiration date. After the expiration date, you won't be able to make requests with the token.

Make sure to rotate tokens by creating a new API Key and update the token in your application.