SendboundSendbound

API Keys

Create and revoke API keys for authenticating Sendbound API requests.

API keys authenticate all requests. The full key is shown once at creation — copy it immediately.

API Key object

{
  "id": "key_01HV...",
  "name": "Production",
  "keyPrefix": "sk_live_abc1",
  "createdAt": "2026-01-10T08:00:00Z",
  "lastUsedAt": "2026-08-26T22:15:00Z"
}

The keyPrefix shows only the first few characters. The full key is never returned after creation.


List API keys

GET/api-keys/
Bearer
curl -X GET 'https://api.sendbound.com/api-keys/' \
  -H 'Authorization: Bearer <your-token>' \
  -H 'Content-Type: application/json'

Returns metadata only — the plaintext key is never included in list responses.


Create an API key

POST/api-keys/
Bearer
curl -X POST 'https://api.sendbound.com/api-keys/' \
  -H 'Authorization: Bearer <your-token>' \
  -H 'Content-Type: application/json' \
  -d '{ "name": "Production" }'
FieldTypeRequiredDescription
namestringYesHuman-readable label (e.g. "Production", "CI")

Response

{
  "id": "key_01HV...",
  "name": "Production",
  "keyPrefix": "sk_live_abc1",
  "plaintext": "sk_live_abc1xyz2def3...",
  "createdAt": "2026-08-27T10:00:00Z"
}

The plaintext field appears only once. Store it in your secrets manager immediately — it cannot be retrieved again.


Revoke an API key

DELETE/api-keys/:id
Bearer
:id
curl -X DELETE 'https://api.sendbound.com/api-keys/:id' \
  -H 'Authorization: Bearer <your-token>' \
  -H 'Content-Type: application/json'

All requests using this key immediately return 401 Unauthorized. Returns 204 No Content.