Manage API keys

Create, copy, and revoke the API keys your integrations use to call the Apropos Public API. Only workspace admins can manage keys, and API access is available on plans that include the feature.

Create an API key

Create a key from Settings > API Keys, then store it where your integration uses it. The raw key is shown only once, so copy it before closing the dialog.

1. Open Settings and select the API Keys tab.

2. Click Create key.

3. Enter a Name for the key so you can recognize it in the list.

4. In the API key created dialog, copy the key. It starts with ak_live_ followed by 64 hexadecimal characters, and it's shown only once — click Done to close the dialog and the raw key is gone for good.

Store the key somewhere secure and add it to your connected service as a Bearer credential. Only a hash of the key is stored, so a lost key can't be retrieved and must be revoked and recreated.

Authenticate requests

Send the key in the Authorization header of every request to the Public API:

Authorization: Bearer ak_live_<secret>

Keys are scoped to your organization, so every customer, proposal, and item query is limited to that organization's data. v1 has no API-key scopes: a valid key has full Public API access for its organization. Each key is limited to 100 requests per 60 seconds.

Revoke an API key

Revoke a key when an integration is no longer in use or you suspect it was exposed. The key list shows each key's name, creation date, recent use, and revoked status. Revoking a key immediately fails every request that uses it, and revoked keys stay in the list marked Revoked.

See Apropos Public API for the resources and endpoints you can call with a key.