API Keys

API keys authenticate every request to cmdsend. Create and manage them from Dashboard → API Keys.

Creating a key

Give the key a name (e.g. "production-backend") and choose its permissions — emails:send, emails:read, or both. The full key value is shown exactly once; copy it immediately. From then on only a masked preview is stored and displayed.

Storing keys safely

• Never commit a key to source control — use environment variables.
• Use separate keys per environment (development, staging, production) so you can revoke one without affecting the others.
• Grant only the permissions a given key needs — a read-only integration shouldn't hold emails:send.

Revoking a key

Deleting a key from the dashboard takes effect immediately — any request using it fails auth on the very next call. There's no grace period, so roll a replacement key into your app before deleting the old one.

See the full request/response shapes in the API Keys reference.