API Key Management
Create, scope, revoke, and safely use API keys for programmatic access to Fonify.
API Key Management
API keys let external systems connect to Fonify programmatically. Use them to add contacts, trigger campaigns, and build automations against the public API.
Creating an API Key
Go to Assistant > Integrations > API Keys and start a new key.
Give the key a clear label. Use restricted access when a specific integration does not need full workspace access.
The complete key is shown once at creation time. Copy it immediately and store it securely.
Never expose API keys in client-side code. Store them on the server side only, using environment variables or a secret manager.
Using the Key
Include the API key in the Authorization header of every request:
curl -X GET https://app.fonify.co/api/v1/campaigns \
-H "Authorization: Bearer fonify_abc123..."The full endpoint list, authentication format, request examples, and error codes live in the API reference.
Managing Keys
- Create a separate key per integration
- Limit scopes to only what that integration needs
- Disable or revoke unused keys
- Watch metadata such as last used time and request counts in the API keys list
Note
Revoking a key is irreversible. Integrations using that key immediately begin receiving 401 Unauthorized.
Rate Limits
API requests are rate-limited per key. Current limits and Retry-After behavior are documented in the API reference.
Tip
Start each new integration with its own key and validate it with a small test request before moving real traffic.