API Keys
All ChatAds API requests require authentication via an API key passed in theX-API-Key header.
Getting Your API Key
- Log into app.getchatads.com
- Navigate to Settings → API Keys
- Click Create API Key
- Give your key a descriptive name
- Copy the key (starts with
cak_)
API Key Format
ChatAds API keys follow this format:- Prefix:
cak_(ChatAds Key) - 32 random characters
Security Best Practices
Never expose in client-side code
Keep API keys server-side only. Never include them in browser JavaScript, mobile apps, or public repositories.
Use environment variables
Store API keys in environment variables, not hardcoded in source code.
Rotate keys regularly
Create new keys periodically and revoke old ones.
Use separate keys per environment
Use different keys for development, staging, and production.
Managing API Keys
Revoking Keys
To revoke an API key:- Go to Settings → API Keys
- Find the key you want to revoke
- Click Revoke
Team API Keys
API keys belong to your team, not individual users. All team members with appropriate permissions can:- Create new API keys
- View existing keys (masked)
- Revoke keys