Skip to main content
All API requests require authentication using an API key. Keys are created in your workspace settings and provide full admin access to your workspace data.

​
Creating an API Key

1

Navigate to Settings > API

From your workspace, click on Settings in the sidebar, then select API.
2

Click Create API Key

Click the Create API Key button to open the creation dialog.
3

Enter a descriptive name

Give your key a name that identifies its purpose, like “Production Integration” or “Analytics Dashboard”.
4

Copy your key immediately

Your API key will be displayed only once. Copy it and store it securely before closing the dialog.
API keys are shown only at creation time. If you lose a key, you’ll need to create a new one.

​
Using Your API Key

Include your API key in the Authorization header of every request: 
Authorization: Bearer exec_live_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

​
Example Request

curl -X GET "https://app.exec.com/rest/v1/workspace" \
  -H "Authorization: Bearer exec_live_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx"

​
Key Format

API keys follow this format:
  • Prefix: exec_live_
  • Body: 40 alphanumeric characters
  • Example: exec_live_aB3dE5fG7hI9jK1lM3nO5pQ7rS9tU1vW3xY5zA7b

​
Managing Keys

​
Viewing Keys

In Settings > API, you’ll see a table of all your API keys showing:
  • Key name
  • Last 4 characters (for identification)
  • Status (Active/Inactive)
  • Creation date
  • Last used timestamp

​
Deactivating a Key

If a key is compromised or no longer needed:
  1. Click the … menu on the key row
  2. Select Deactivate
Deactivated keys are immediately rejected. You can reactivate them later if needed.

​
Deleting a Key

To permanently remove a key:
  1. Click the … menu on the key row
  2. Select Delete
Deleting a key is permanent and cannot be undone. Any integrations using the key will stop working immediately.

​
Security Best Practices

Never commit keys to code

Use environment variables or secrets management

Use descriptive names

Name keys by purpose so you know what to revoke

Rotate keys periodically

Create new keys and deactivate old ones regularly

Limit access

Only share keys with systems that need them

​
Error Responses

StatusErrorCause
401Missing Authorization headerNo Authorization header provided
401Invalid or inactive API keyKey is wrong, deactivated, or deleted
403Workspace is inactiveYour workspace has been disabled