Creating and managing API keys

Creating a key

1. Settings → API → Create key.
2. Give the key a name (e.g. "Production integration").
3. Pick the scopes — by default a key is read-only.
4. Click Generate. The plaintext key is shown once. Copy it now.

Key format

Keys start with ad_live_ (live) or ad_test_ (test). The _test_ prefix lets you build against the API without consuming live rate limits or audit-log entries.

Scoping

You can scope a key to:

• A specific company (so leaks don't expose the whole workspace).
• Read-only or read-write (write endpoints arrive in a future release).

Storage

We hash keys before storing them. Once you generate a key, we never see the plaintext again — if you lose it, you have to revoke and create a new one.

Rotation

Best practice: rotate keys every 90 days. From Settings → API, click a key and Rotate — you'll be given the new value and the old one is invalidated.

Revoking

Click any key and Revoke. Within 60 seconds, all requests using that key return 401 invalid_key.

Audit log

Every key use is logged. Filter the audit log in Settings → Audit log by api.request to see exactly what each key has done.