API keys are used to authenticate your requests to the Kawaa API.
Creating an API key
- Log in to your Kawaa dashboard
- Navigate to Settings → API keys
- Click the "Create API key" button
- Give your key a descriptive name (e.g., "Production Server" or "Development")
- Copy the key immediately - it won't be shown again
API key best practices
- Never expose keys in client-side code - Always make API calls from your server
- Use environment variables - Store keys in environment variables, not in code
- Create separate keys - Use different keys for development and production
- Rotate keys regularly - Delete old keys and generate new ones periodically
- Monitor usage - Check your dashboard for unusual API activity
Revoking API keys
If a key is compromised or no longer needed, you can revoke it immediately from the API Keys page. The key will stop working instantly.
Security note
If you believe your API key has been compromised, revoke it immediately and generate a new one.