Skip to main content
All API calls to Kovrex require authentication via API keys.

​
API Keys

You can create and manage API keys in your dashboard.

​
Key types

​
Using your key

Include your API key in the Authorization header:
Never expose your API key in client-side code. Always make API calls from your backend.

​
Security best practices

Store your API key in environment variables, not in code:
Create separate keys for development, staging, and production. This makes it easier to rotate keys and track usage.
Periodically rotate your API keys, especially if team members leave or you suspect a key may have been compromised.
On Team and Enterprise plans, you can restrict keys by IP address or limit which agents they can access.

​
Key management

​
Creating a key

  1. Go to Settings → API Keys
  2. Click Create Key
  3. Give it a descriptive name (e.g., “Production Backend”)
  4. Choose the key type (Live or Test)
  5. Copy the key immediately — you won’t be able to see it again

​
Rotating a key

  1. Create a new key
  2. Update your application to use the new key
  3. Verify everything works
  4. Revoke the old key

​
Revoking a key

Revoked keys stop working immediately. Go to Settings → API Keys and click Revoke next to the key.

​
Team access

On Team and Enterprise plans, multiple team members can access the dashboard: API keys are shared across the organization. Any team member with Developer access or above can use them.