API Keys

Manage API keys in the dashboard. Use a separate key for each application and environment.

Create a key

Select New key, then give it a name such as checkout-production. Copy the secret into your server’s EVENTLAYER_KEY environment variable. The secret is shown only once.

Rotate a key

1. Create a replacement key in the dashboard.
2. Update your application’s server environment and deploy it.
3. Confirm requests work, then delete the old key.

Revoke a key

Delete it from API Keys in the dashboard. Requests using that key will receive 401 Unauthorized. If a key is lost or exposed, replace it.

See authentication to use your key in the SDK or HTTP requests.