How to Manage Public API Keys

Scope note: despite the card's description ("control programmatic access to your organization's data"), this doesn't manage general CRM data API access. It manages keys for exactly five named integrations: Public Chat, Subscription Catalog, Public Webinar, VoIP Recording Uploads, and the E-Signature API. If you're looking for a broader data API, this isn't it — flag that clearly to whoever's reading, don't imply broader scope.

Create and manage API keys that grant one or more of the five specific public-facing integrations access to your organization.

Before you start

Access to Settings → System Security.

Steps

1. Go to Settings → System Security → API Access.
2. Click Create Key.
3. Enter a Label (required, e.g. "Marketing Site") and optionally restrict Allowed Origins (comma-separated; blank allows any origin).
4. Check which Scopes this key should have: Public Chat, Subscription Catalog, Public Webinar, VoIP Recording Uploads, E-Signature API (only Public Chat is checked by default).
5. Click Create. The full key value is shown exactly once — copy it now, you won't see it again.

To manage an existing key

• Edit Scopes (pencil icon) — change which of the five scopes are granted. Label and Allowed Origins can't be changed after creation.
• Toggle Active/Inactive — pause a key without deleting it.
• Revoke (trash icon) — permanently disables the key; anything using it stops working immediately.

What you'll see

The table shows each key's label, a truncated prefix (the full value is never shown again), scopes, allowed origins, status, and last-used date.