API Authentication

1. Go to Account Settings → Developer → API Keys

2. Click Generate New Key

3. Give the key a descriptive name (e.g. 'Slack Bot', 'Internal Dashboard')

4. Copy the key immediately — it's shown in full only once

5. Store it securely (environment variable, secrets manager — never in source code)

Include your API key in the Authorization header of every request:

```

Authorization: Bearer your-api-key-here

```

Example curl request:

```

curl https://api.askbiz.co/v1/pulse \

-H 'Authorization: Bearer your-api-key-here'

```

• Never commit API keys to Git — use environment variables
• Use one key per integration — makes it easy to revoke a single integration without affecting others
• Rotate keys every 90 days — generate a new key, update your integration, then revoke the old one
• Monitor usage — the Developer page shows request volume per key; unusual spikes may indicate a leaked key

If a key is compromised or no longer needed, go to Account Settings → Developer → API Keys and click Revoke next to the key. Revocation is immediate — all requests using that key will return 401 Unauthorized.