Managing API Keys

API keys are how your applications authenticate. The portal lets you create as many as you need and manage them over time.

Create and label

Create a key and give it a clear label that says where it is used, for example "production website", "staging" or "mobile app". Labels make the usage log readable, so when you see traffic you know which app it came from.

One key per environment

Use separate keys for separate apps and environments. If one needs to be rotated or is exposed, you can revoke just that key without disrupting everything else. It also keeps your usage analysis clean.

Keep keys secret

• Store keys server-side, in environment variables or a secrets manager, never in client code.
• Do not commit a key to a public repository.
• If a key leaks, revoke it immediately and issue a new one. Usage is tracked per key, so you can audit what happened.