Creating and Managing API Keys
API keys authenticate your requests to the Kintsugi API. This guide will walk you through creating, managing, and securing your API keys with screenshots and step-by-step instructions.
Create Your First Key
Generate an API key in just a few clicks
Security Best Practices
Keep your keys secure and compliant
API Reference
Explore our comprehensive API docs
Test Your Key
Verify your API key works correctly
Partner Experience
Partners manage keys inside the Partner Experience
Kintsugi app (direct customers)
Direct customers manage keys in the main Kintsugi app
Partner Experience (Partners)
If you access Kintsugi through the Partner Experience (PX), your API keys are created and managed inside the Partner Experience itself — you no longer go into the main Kintsugi app (app.trykintsugi.com) to mint an organization-specific key.
Partner accounts are provisioned automatically. Partner organizations are managed in PropelAuth as their own organizations, separate from standard (client) organizations. Your partner org is created for you — there’s no need to manually create a standalone organization. When a user is added to the Partner Experience, an invite email is sent automatically.
Key scopes
Client API keys are issued with one of two scopes, set at creation:| Scope | Created with | Grants access to |
|---|---|---|
| Partner | no clientOrganizationId | The Partner APIs (/v2/partner/*), portfolio-wide across all client organizations linked to the partner. |
| Client | a clientOrganizationId (must be in the partner’s portfolio) | The main organization APIs, scoped to that single client organization. Sent with x-organization-id set to that client. |
x-api-key header; scope is enforced from the key’s metadata. Creating, listing, and deleting keys requires the partner owner or admin role.
Manage keys in the Partner Experience
Create a key. Leave the client organization unset for a portfolio-wide partner key, or select a client organization for a client-scoped key. Optionally set an expiration.
Manage keys via the API
The same operations are available programmatically on the Partner API (owner/admin only):| Operation | Endpoint |
|---|---|
| Create a key | POST /v2/partner/api_keys |
| List your keys | GET /v2/partner/api_keys |
| Delete a key | DELETE /v2/partner/api_keys/{api_key_id} |
apiKeyId and apiKeyToken. The token is returned once and is not retrievable afterward.
POST /v1/organizations/api_keys also remains available for creating org-scoped keys during programmatic client onboarding. See the Partner Organization Setup guide.Kintsugi app (direct customers)
If you’re a direct/customer account, create and manage your API keys in the main Kintsugi app.Sign Up or Log In
Visit the Kintsugi Platform.
If you don’t already have an account, click on the Sign Up button and follow the instructions to create an account.
Navigate to Configuration Section
Access the API Keys Section
Create a New API Key
Copy and Secure Your API Key
- Copy the API Key Immediately.
Viewing and Managing Your API Keys
API Keys are scoped to an organization and will remain active until the organization is deleted or the key is deleted. You can create multiple API keys to cycle them out periodically.
Users can only create API keys within a Test Organization or a Paid Organization. Creating API keys in other organization types is disabled.
Next Steps
Test Your Key
Verify your API key works correctly
API Reference
Explore available endpoints
Integration Guides
Connect your applications
Need Help?
Common Issues
Common Issues
- Key Creation
- Key Management
- Security Concerns
- Can’t find API Keys section: Check you’re in a Test or Paid organization
- Permission denied: Contact your organization admin
- Key not generating: Try refreshing the page and try again
- Expiration options: Choose based on your security requirements
Get Support
Get Support
Email Support
Get help from our support team
Live Chat
Chat with us in real-time
API Documentation
Browse our comprehensive API docs
Developer Community
Connect with other developers





