How to do it
- 01
Open Settings, then Plans & billing and select the API keys or Webhooks tab if your role and plan expose it.
- 02
For an API key, choose the narrowest scopes and an expiry. Save the secret immediately; the full value is shown once.
- 03
For a webhook, add a receiver URL and only the events you need. Store its signing secret securely and verify signatures on your server.
- 04
Use the delivery history and pause controls to investigate errors. Revoke keys or endpoints that are no longer used.