> ## Documentation Index
> Fetch the complete documentation index at: https://docs.webacy.com/llms.txt
> Use this file to discover all available pages before exploring further.
# Get an API Key
> Create a Webacy Developer Portal account, generate an API key, and rotate or revoke keys using the interim workflow until self-service ships.
To start using the Webacy DD APIs, you’ll need an API key associated with your account.
Your API key authenticates requests to Webacy and determines which products, usage limits, and environments your account can access.
Create an account on our [Developer Portal](https://developers.webacy.co/) or sign in to your existing account.
The Developer Portal requires a work or organization email address to register. Personal addresses such as Gmail, Yahoo, or Outlook are rejected during sign-up with the error `Please use your organization's email address to register. Personal email addresses are not permitted.` If you do not have an organization email, contact [info@webacy.com](mailto:info@webacy.com) to request access.
Once you are signed in, open the developer dashboard and navigate to **API Keys**.
From the **API Keys** page:
1. Select **+ Generate API Key**.
2. Securely store the generated key.
**Keep Your Key Secure!**
Treat your API key like an important password.
Do not:
* expose it in browser-side code
* commit it to a public repository
* include it in screenshots, logs, or support messages
* share the same production key across unrelated applications
If your key is exposed, anyone can use your API key as you. You will be responsible for all usage costs, limits, and impact caused by the exposed API key.
**Use Separate Keys for Each Environment**
We recommend creating different keys for:
* local development
* staging
* production
* separate applications or internal teams
This makes it easier to monitor usage, rotate compromised credentials, and revoke access without interrupting every integration.
## Rotate or revoke your key
Self-service rotation and revocation are not yet available in the Developer Portal (see the coming-soon list below). Until they ship, use the following interim workflow.
**To rotate a key:**
1. In the Developer Portal, open **API Keys** and select **+ Generate API Key** to create a new key.
2. Update every application, environment, and stored secret to use the new key.
3. Stop sending the old key. Requests with the old key continue to succeed until Webacy revokes it, so cut all traffic over before requesting revocation.
**To revoke a key, including any key you believe is compromised:**
1. Complete the rotation steps above so live traffic is on the new key.
2. Email [info@webacy.com](mailto:info@webacy.com) or use the [contact form](https://dapp.webacy.com/contact) with the key ID (never the full secret) and request revocation. Webacy revokes the key on your behalf.
If a key is exposed, treat it as compromised. Rotate first so your integration keeps working, then request revocation immediately. The old key remains valid until Webacy revokes it.
Our Developer Portal is currently under construction.
The following features are coming soon:
* Rotate API Key
* Revoke / Delete API Key
* Create Multiple API Keys
* Team Management
* RBAC
Want additional features? [Contact Us](https://dapp.webacy.com/contact).
## What's Next
Learn how to authenticate your API requests
This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.