Skip to main content
API keys are created from the Account section of the customer console.
The API-key tab shows named keys, status, creation time, and usage information.

The API-key tab shows named keys, status, creation time, and usage information.

​
Create a key

  1. Open Account and select the API Keys tab.
  2. Enter a descriptive name such as billing-report-production.
  3. Create the key.
  4. Copy the complete value immediately.
  5. Store it in a secret manager or protected environment variable.
The complete key is shown only at creation and must be replaced with a redacted value before capture.

The complete key is shown only at creation and must be replaced with a redacted value before capture.

​
Security model

  • New keys use the kh_live_ prefix.
  • The complete key is returned only once.
  • The platform stores a SHA-256 hash rather than the recoverable plaintext value.
  • Keys can be deactivated, reactivated, and permanently deleted.
  • The API rejects inactive or invalid keys.
  • Usage and last-use information can be shown in the console.
Usage visibility helps identify unexpected automation activity.

Usage visibility helps identify unexpected automation activity.

The developer platform can distinguish account, service, domain, billing, order, notification, and AI Agent permissions. Grant only what the integration needs.
Never place an API key in browser-side JavaScript, a public Git repository, a screenshot, or a support ticket.