API key management

API keys are managed from Channels → API access in the management interface.

Key types

Two key types are available, each with distinct access:

• Customer keys (lxc_) — access customer chat API endpoints only.
• Management keys (lxm_) — access management chat API endpoints only.

Each key type only grants access to its corresponding API — a customer key cannot access management endpoints and vice versa.

Creating keys

1. Open Channels in the rail and choose API access.
2. Find the card for the key type you need, customer or management.
3. Optionally add a label, such as "Production", and choose when the key expires.
4. Click Create key. A management key asks you to confirm with Create management key, because it grants full configuration access.
5. Copy the key straight away. It is shown only once and can't be retrieved again.

Security

Plaintext keys are never stored — only a cryptographic hash is persisted. The full key is shown exactly once at creation. If a key is lost, revoke it and create a new one.

Managing keys

• View keys — See active keys with masked values (last 4 characters visible), label, creation date and expiry.
• Limit — Up to 20 active keys per organization.
• Check a key — GET /api/v1/customer/identity or GET /api/v1/management/identity returns the key's organization, type, environment and expiry, without using credits.
• Revoke keys — Click Revoke to stop a key working. A revoked key can't be turned back on.
• Permissions — Only admins can create and revoke keys. Members can see the list.