Managing API keys

Open Settings > API Keys to view the credentials for your workspace.

• Public API key: Intended for client-side widget or public integration scenarios.
• Secret API key: Intended for server-side requests. Keep it private and never commit it to source control or expose it in browser code.

Use the copy and visibility controls to retrieve a key when configuring an integration. The secret key is different from the X-API-KEY value used in the task webhook examples; use the credential shown for your workspace and follow the endpoint’s authentication requirements.