Skip to main content
Fidel80 supports API-key authentication for programmatic access to its GraphQL API.

Create an API key

In the Fidel80 application:
1

Open Developers

Navigate to Developers.
2

Open API authentication

Select API authentication.
3

Create the key

Select Create API Key, enter a descriptive name, and optionally configure an expiration date.
4

Copy the key

Copy the generated API key immediately and store it securely.
The full API key is shown only when it is created. Fidel80 stores a hashed representation of the key rather than the original value.
Fidel80 API keys begin with:

Authenticate a request

Send the API key using the HTTP Authorization header:
For GraphQL requests:

Expiration

An API key can have an optional expiration date. Expired keys can no longer authenticate API requests.

Revocation

API keys can be revoked from Developers → API authentication. Once revoked, the key can no longer be used.

Security recommendations

  • Never expose an API key in frontend or browser code.
  • Store API keys in server-side environment variables or a secrets manager.
  • Use separate keys for separate integrations where appropriate.
  • Revoke keys that are no longer required.
  • Rotate a key if you believe it has been exposed.