> ## Documentation Index
> Fetch the complete documentation index at: https://docs.mailerpath.com/llms.txt
> Use this file to discover all available pages before exploring further.

# API Keys

> Create, enable, rotate, and revoke the API keys used for event sending.

API keys authenticate machine-to-machine calls for MailerPath event sending.

Use a key for server-side requests only, keep it out of browser code, and rotate it whenever access changes.

## Create a key

1. Open **Settings**.
2. Go to **API keys**.
3. Create a new key with a clear label.
4. Enable the key for event sending.
5. Store the key in a secrets manager.

## Good key habits

* Use separate keys for staging and production.
* Scope keys as tightly as possible.
* Rotate keys on a schedule.
* Revoke keys when a service or teammate no longer needs access.

## How MailerPath uses the key

* Authenticates the event request.
* Matches the event to the correct contact.
* Feeds tags, workflows, and analytics.
* Keeps event traffic tied to a trusted source.