Skip to main content
Use the dashboard API Keys page for day-to-day key management after your initial setup.

​
What this page is for

Manage API keys when you need to:
  • Create a new key for another service
  • Rotate a key after a deployment or security event
  • Revoke an old or unused key
  • Split access by environment or permission set
  • Create separate keys for sandbox and production
  • Use one key per service or deployment target
  • Give each key the minimum permissions it needs
  • Rotate keys instead of reusing one key everywhere

​
Manage keys in the dashboard

  1. Open API Keys.
  2. Choose the environment.
  3. Create, review, or delete the key you need.

​
Permission model

Current API permissions include:
  • express.pay
  • customers.read
  • customers.write
  • transactions.read