API Keys & Tenant ID

Every request to the public API must identify which tenant it belongs to and prove it's authorized to read that tenant's content.

1. Find your Tenant ID

Your Tenant Key is your workspace identifier. It's shown in Workspace → Settings and used as the value of the X-Tenant-Key header (or the tenantKey query parameter).

2. Generate an API Key

Go to Workspace → Settings → API Keys. Keys are issued per environment and platform:

  • Development — keys prefixed dev_, for local/staging integrations.
  • Pre-Production — keys prefixed preprod_, for QA environments.
  • Production — unprefixed keys, for live traffic.

Click Reset next to a platform's key (desktop / mweb / app) to mint a new one. The full key is shown once — copy it immediately and store it somewhere safe (secret manager, env var). Resetting a key immediately invalidates the previous one, so rotate carefully.

3. Authenticate a request

X-Tenant-Key: <your-tenant-key>
X-Api-Key: <your-api-key>

Both headers also accept a query-parameter fallback (?tenantKey=...&apiKey=...) for environments where custom headers are awkward, such as browser-side GraphQL clients.

Note — the environment used to resolve content (dev/preprod/production) is inferred from the API key's prefix, not from a separate parameter. Use the matching key for the environment you want to read from.