API keys
Create and protect credentials used by your integrations.
An API key authenticates code that connects to your Vivollo workspace.
Create a key
- Open Developer and create an API key.
- Add a clear description, such as “CMS publisher” or “warehouse sync.”
- Add an expiry date if the access is temporary.
- Copy the token and store it in a secret manager.
The full token may only be shown when it is created.
Use the key
Send it as a bearer token:
Authorization: Bearer YOUR_API_KEYProtect your keys
- Never commit a key to a repository.
- Do not put it in client-side code, screenshots, tickets, or chat messages.
- Use a separate key for each integration.
- Rotate long-lived keys regularly.
- Revoke an unused or exposed key immediately.
The Developer page shows each key's description and last use. Revocation takes effect immediately, so replace the key in the integration before revoking it when you need uninterrupted service.
The number of active keys depends on your plan. See Plans and limits.