API keys are used to authenticate your requests to:
  • REST API endpoints
  • SDK integrations
  • Webhook endpoints
Each workspace can have multiple API keys, all sharing the same permission level.

​
REST API Authentication

To authenticate your REST API requests, include your API key in the request headers: 
Authorization: Bearer YOUR_API_KEY
Try out authentication in our API Playground to see it in action.

​
Webhook API Key

For enhanced security, we automatically designate one of your API keys for webhook authentication. This designated webhook API key:
  • Is used to sign and verify webhook requests
  • Cannot be deleted
  • Ensures your webhook endpoints only receive legitimate requests
Keep your API keys secure and never share them in public repositories or client-side code.