Skip to main content
API keys allow your backend servers to interact with Fluxrate without user authentication. They are scoped to specific operations for security.

​
Scopes

​
Creating an API Key

  1. Go to API Keys in the sidebar
  2. Click Create API Key
  3. Give it a descriptive name (e.g., “Production Backend”)
  4. Select required scopes
  5. Click Create
  6. Copy the key immediately — it’s only shown once
The key value is shown only once at creation time. If you lose it, delete the key and create a new one.

​
Listing API Keys

Note: The key secret is never returned in list responses — only the key ID, name, scopes, and status.

​
Deleting an API Key

Deleted keys are immediately revoked. Any requests using that key will receive a 401 Unauthorized response.

​
Security Best Practices

  1. Least privilege — Only grant the scopes your integration actually needs
  2. Environment variables — Store keys in environment variables, never in code
  3. Rotate regularly — Delete and recreate keys periodically
  4. Per-environment — Use separate keys for development, staging, and production
  5. Monitor — Watch for unexpected usage patterns

​
API Key Format

Keys follow the format: org_live_<random> for production keys.