Creating and revoking API keys

API keys are used to authenticate requests to the Sendr API. Each key is tied to your workspace and has full API access.

Creating an API key

1. Go to Settings > API
2. Click "Create API key"
3. Give the key a name (e.g. "Production", "Zapier integration")
4. Copy the key immediately — it is only shown once

Store your API key securely. Treat it like a password — do not commit it to version control or expose it in client-side code.

Revoking an API key

1. Go to Settings > API
2. Find the key you want to revoke
3. Click "Revoke"

Revoking a key is immediate. Any requests using that key will return a 401 Unauthorized response. Create a new key if you need to replace a revoked one.

Key management best practice

• Create separate keys for separate integrations so you can revoke one without affecting others
• Rotate keys periodically
• Revoke any key you suspect has been compromised immediately