Skip to main content
API keys provide authentication for integrations, scripts, and automated workflows. Each key is scoped to a user and organization, enabling secure programmatic access to the Exante API.
For details on how to authenticate requests using API keys, see Authentication.

​
Key Lifecycle

StateDescription
ActiveKey is valid and can authenticate requests
ExpiredKey has passed its expires_at date and is rejected
RevokedKey was manually deactivated and cannot be used

​
Management Endpoints

Create key

Generate a new API key with optional expiration

List keys

View all keys for your organization

Revoke key

Immediately deactivate a key

​
Common Workflows

​
Creating a Key for an Integration

curl -X POST https://dev.exante.app/api/api-keys \
  -H "Authorization: Bearer ex_live_existing_key" \
  -H "Content-Type: application/json" \
  -d '{"name": "Zapier Integration", "expires_in_days": 365}'

​
Rotating Keys

  1. Create a new key with Create API Key
  2. Update your integration to use the new key
  3. Verify the new key works
  4. Revoke the old key with Revoke API Key

​
Auditing Keys

Use List API Keys to review:
  • Which keys exist for your organization
  • When each key was created and last used
  • Which keys are approaching expiration