Create and revoke API keys

An API key lets a script or tool, such as a reporting script, work with your account without a browser. It carries the same permissions as your own login, and there's no way to give a key fewer.

Before you start

• Verify your email first. See Verify your email.
• Check your level. A key can do what you can do. See Team permission levels.

Create a key

1. Open Settings and find API Keys.
2. Select New key.
3. Enter a Key name, such as the name of the script.
4. Choose an Expiry: No expiry, 30 days, 90 days or 1 year.
5. Select Create key.
6. Copy the key under Copy your API key now, and store it somewhere safe.

Use a key

Send it in the Authorization header of each request:

Authorization: Bearer mlx_live_...

If your login holds several accounts, a key works in the account you land in when you sign in, not the one you have open in the dashboard.

Revoke a key

Select the Revoke key icon next to it. There's no confirmation step, and you can't undo it. The next request with that key is refused. The row stays in the list, marked Revoked.

What happens next

The list shows when each key was created, when it was last used and when it expires. Each key belongs to the person who made it, so you see only your own.

A key keeps working when you change your password and when your dashboard session ends. It stops when it expires, when you revoke it or if your account is suspended.

If something goes wrong

• Verify your email before creating an API key. See Verify your email.
• Invalid, expired, or revoked API key. Check the key and its Expires date, or create a new one.
• Insufficient permissions for this action. Your level doesn't allow that. A key can't do more than you can.