Manage API keys
Generate, name, and revoke API keys from the dashboard.
API keys authenticate your requests. Manage them in the dashboard under Settings → API Keys.
Generate a key
- Go to Settings → API Keys.
- (Optional) Enter a name to identify the key, e.g.
productionorstaging. - Click Generate API key.
- Copy the key now - it starts with
jp_live_and is shown only once. Store it in a secret manager.
Use it as a Bearer token on every request - see Authentication.
View your keys
The keys list shows each key's name, a masked prefix (e.g. jp_live_…), when it was created, and when it was last used - so you can spot stale or unused keys.
Revoke a key
Click Revoke next to a key and confirm. Revocation is immediate - any request using that key starts returning 401. Revoking can't be undone; generate a new key to replace it.
Treat keys like passwords. Never commit them to source control or expose them in client-side code. If a key leaks, revoke it immediately and issue a new one.
Rotating keys
To rotate without downtime: generate a new key, deploy it to your app, confirm traffic is flowing on the new key (the last used timestamp updates), then revoke the old one.