API key management

You can create and manage your API keys in Project settings > API keys. The list of API keys shows you the API keys you can access.

• Get published content from environments

• With Management API keys, you’ll see the API key’s name.
• With Personal API keys, you’ll see the API key’s owner name.

• Delivery API keys are managed by project managers. Project managers can specify additional users who can view the API key value.
• Management API keys are managed by project managers. Project managers can specify additional users who can view the API key value.
• Personal API keys are managed by their owners. These can be project managers and users with the Create a personal API key permission. Project managers can revoke other users’ personal API keys, but cannot see the API key value.

1. In Project settings > API keys > Delivery API keys, click Create Delivery API key.
2. (Optional) In Expiration date, choose when you want the API key to expire. By default, the API key expires in one year.
3. In Name, type the name of the API key.
4. (Optional) In Users with access to this API key, allow specific users to view and copy the API key. By default, all project managers can view the API key.

1. In Project settings > API keys > Management API keys, click Create Management API key.
2. (Optional) In Expiration date, choose when you want the API key to expire. By default, the API key expires in six months.
3. In Name, type a human-friendly name describing the API key’s purpose. For example, Translation management or Team notifications.
4. (Optional) In

• Get content items.
• Get content item variants.
• Validate content

• Add content items.
• Change workflow of content item variants.
• Create new versions of content item variants.
• Delete content items.
• Delete content item variants.
• Publish, schedule, and unpublish content item variants.
• Upsert content items.

• Get assets.
• Get asset folders.
• Get asset renditions of an asset.

• Add assets and files.
• Add asset folders.
• Add asset renditions.
• Delete assets.
• Delete asset folders.
• Modify asset folders.
• Modify asset renditions.
• Upsert assets.

• Add, get, modify, and delete content types.
• Add, get, modify, and delete content type snippets.
• Add, get, modify, and delete taxonomy groups.

• Add, get, and modify languages.
• Add, get, modify, and delete spaces.
• Get and modify collections.
• Get and modify preview URLs.
• Get and modify the live preview's status.
• Add, get, and delete webhooks.
• Add, get, modify, and delete

• Clone environments.
• Delete environments.
• Get information about environments and their cloning status.
• Mark environments as production.
• Rename environments.

1. In Project settings > API keys > Management API keys, click Create Personal API key.
2. (Optional) In Expiration date, choose when you want the API key to expire. By default, the API key expires in six months.
3. Click Save changes.
4. In API key, click to copy the API key value.

• For Management API keys, the default expiration length is six months. The expiration length can vary from 1 minute to 2 years.
• For Delivery API keys, the default expiration length is one year. The expiration length can vary from 1 minute to 5 years.

• You suspect unauthorized API key usage, for example, after a user leaves your company. In such cases, switch to a new API key in your apps and regenerate your existing API key.
• Users are removed from your project’s environment or subscription. Depending on the user’s access level, you might want to regenerate the shared Delivery API keys.
• You receive a notification about an upcoming expiration of your API key.

1. In Project settings > API keys.
2. On either the Delivery API keys or Management API keys tab, choose an API key to view its details.
3. In API key, click .

1. In Project settings > API keys.
2. On either the Delivery API keys or Management API keys tab, choose an API key to view its details.
3. Click Revoke.
4. In the confirmation dialog, click Revoke.

• For retrieving published content from environments with secure access enabled, select Secure access.
• For previewing the latest and unpublished content, select Content preview.

Manage API keys

Delivery API keys

Management API keys

Who can manage API keys?

Create Delivery API keys

Create Management API keys

Management API key permissions

Create Personal API keys

Set API key expiration

Regenerate API keys

Revoke API keys

• Web
• Privacy policy
• Cookies policy
• Consent settings
• Security
• GDPR

• Management API keys with a static set of customizable permissions. Use unique Management API keys when integrating with third-party services or for continuous usage in production.
• Personal API keys with a dynamic set of inherited permissions. The API key has the same permissions as its owner. Use personal API keys in your personal projects for testing. Don’t share your personal API keys with anyone else.

• If the expiration date is less than a day apart from the API key's creation date, the email notification is sent immediately.
• If the expiration date is between 1–7 days apart form the API key's creation date, the email notification is sent 1 day before the expiration date.
• If the expiration date is more than a week apart from the API key's creation date, the email notification is sent 1 week before the expiration date. 

• Explore Kontent.ai’s API landscape and manage your API keys securely.