Docs / API keys and rotation · 4 min
API keys and rotation
Authenticate your tracker; rotate without downtime.
How keys work
A screening key authenticates every lookup your tracker sends. Keys are shown once at creation; store them in your tracker, not in a doc. Any active key of your setup is accepted.
Rotating a key
- Home → API keys → New key. Copy the new key.
- Update your tracker's webhook to send the new api_key.
- Revoke the old key. Lookups with a revoked key start failing immediately, so switch the tracker first.
Rotation is zero-downtime because both keys are valid until you revoke one.