Skip to main content
Open Settings → API Keys. Keys belong to the workspace selected at the top of the app; switch workspaces to manage another account’s keys. The page has two tabs.
Never put a secret key in a website, mobile app or any code that runs on your customers’ devices. Use the publishable key there.

Create a secret key

1

Click New API key

On the Secret keys tab.
2

Name it

Use a name that says where the key will run, such as “Production backend”.
3

Choose the permissions

Permissions are grouped by area, such as Email, SMS, WhatsApp, Webhooks and Stats. New keys start with Read email, Send email, Read webhooks, Manage webhooks and Read stats. Select only what this integration needs; Reset to defaults brings back the starting set.
4

Copy the key

Click Create. The full key is shown only once: copy it, store it somewhere safe, then click I have saved it.
The list shows each key’s name, ID, status, when it was last used and when it was created.

Disable or delete a key

  • Disable stops a key from working without deleting it. Enable turns it back on.
  • Delete removes it for good. Applications using it stop working immediately, and this can’t be undone.
Keys marked System are Managed by RevBridge and can’t be changed here.

The publishable key

On the Publishable key tab, click Generate publishable key, then Copy it into your Web SDK snippet. Regenerate creates a new key. The current one stops working once your sites and apps switch to the new one, so update your install snippet right after regenerating.

Next steps

Authentication

How to send your key with each request.

Web SDK

Install the SDK on your site with the publishable key.