API keys let external tools and scripts authenticate to the platform on your behalf. They are scoped to your user and inherit your permissions in the active organisation.

  1. Open your Profile page from the avatar dropdown in the top right.
  2. Scroll to the API Keys section.
  3. Click Create API Key.
  4. Enter a descriptive name (e.g. "Zapier integration" or "Internal reporting script") so you can identify the key later.
  5. Click Create.
  6. Copy the key immediately — for security reasons the full key is shown only once. After you close the dialog, only the first few characters remain visible.

Use the key as a Bearer token in the Authorization header of API requests.

To revoke a key, return to the API Keys section and click the delete icon next to the key. Any tools using it will stop working immediately.

Note: API keys are currently in a phased rollout and may not be visible in every organisation. If the section is not on your Profile page, this capability is not yet enabled for your account.