API key

An API key is tied to a workspace and is used to authenticate signed embeds.

Manage API keys from global nav > Workspace settings > API keys. Only a Workspace Owner can create a key or retrieve a secret (Workspace permissions).

What you can manage

• New API Key creates a key, and you can manage its name, API key, and API secret.
• The list shows Name / API Key / API Secret / Last used (Created).
• To rotate keys, you can issue multiple secret versions for a single API key (Add secret).
• You can Copy secret, delete a secret, Rename or delete a key, and view its usage log / change log.

API secrets are only handled server-side. If you lose one, add a new secret version or recreate the API key.

Creating and deleting API keys, retrieving, creating, and deleting secrets, and using a key are all recorded in the audit log.

Issuing a token

For issuing tokens for signed embeds, see Integration steps.