Skip to main content

​
Overview

Not a developer? This page is for whoever is connecting another program to your account. An API key is a password that lets another program use your account. Create one here, send it to your developer privately (never by email or chat), and point them to this page. If they also mention a webhook, an endpoint URL, a signing secret, or a payload, those are explained in plain words on the Webhooks page. API keys let external systems and integrations act on your workspace through the Autocampaign AI API. Manage them at Settings → API keys (/settings/api-keys).
Time to complete: ~5 minutes  ·  Difficulty: Advanced  ·  You need a role that can manage API keys, and you must be signed in as a person — a key can’t be used to create other keys.
An API key acts with Owner-level permissions for your workspace — anyone with the key can do anything an owner can. Store it securely and never save it in your code repository (source control).

​
Create an API key

1

Create key

Go to Settings → API keys and click Create API key.
2

Name it

Give it a Name (e.g. “Zapier integration”), an optional description, and an optional expiration (leave blank for a key that never expires).
3

Copy the secret now

The full key (starting with et_live_) is shown once. Copy and store it immediately — you can’t see it again.

​
Authenticate

Send the key on each request using either header (the part of a request that carries the key):
or

​
Rotate, revoke, delete

  • Rotate — generates a new secret (shown once) and immediately stops the old one working. Use this if a key may have leaked.
  • Revoke — stops the key working immediately, keeping its history.
  • Delete — removes it from the list.
Keys show a status of active, revoked, or expired, plus when they were last used.
API keys can’t manage other API keys or webhooks — those actions require a signed-in user.

​
FAQ

Not today — every key has Owner-level access. Treat keys as highly sensitive and rotate them regularly.
No. The secret is shown only once. Rotate the key to get a new secret.
See the API reference for authentication, conventions, and available endpoints (the web addresses your program sends requests to).

​
Troubleshooting

Confirm the key is active (not revoked or expired) and sent in the X-API-Key or Authorization: Bearer header exactly as issued.

Set up webhooks

Get told automatically when something happens in your account.