API Keys

Go to Settings > API (/settings/api).

You can:

• Create keys with scoped permissions
• View key prefixes and usage metrics
• Delete keys that are no longer needed

1. Click Create API Key.
2. Enter a key name.
3. Select one or more scopes.
4. Save and copy the generated key immediately.

Important: The full key is only shown once.

Current scope options include:

• contacts:read, contacts:write
• surveys:read, surveys:send
• sequences:read, sequences:execute
• responses:read
• reviews:read, reviews:write
• webhooks:read, webhooks:write

Use either header format:

• X-API-Key: dem_...
• Authorization: Bearer dem_...

• Use one key per environment or integration
• Grant only required scopes
• Rotate keys regularly
• Delete compromised or stale keys immediately
• Keep keys in a secret manager, not client code

The API expects keys starting with dem_.

Confirm the key:

• Exists in your organization
• Is active
• Is not expired

Your key is valid but missing the required scope for that action.

• Zapier Integration
• HubSpot Integration
• API-Triggered Sequences