> ## Documentation Index
> Fetch the complete documentation index at: https://docs.fidel80.com/llms.txt
> Use this file to discover all available pages before exploring further.

# API Keys

> Create and use Fidel80 API keys for authenticated developer access.

Fidel80 supports API-key authentication for programmatic access to its GraphQL API.

## Create an API key

In the Fidel80 application:

**1. Open Developers**

Navigate to **Developers**.

**2. Open API authentication**

Select **API authentication**.

**3. Create the key**

Select **Create API Key**, enter a descriptive name, and optionally configure an expiration date.

**4. Copy the key**

Copy the generated API key immediately and store it securely.

> [!WARNING]
>
> The full API key is shown only when it is created. Fidel80 stores a hashed representation of the key rather than the original value.

Fidel80 API keys begin with:

```text theme={null}
fidel80_
```

## Authenticate a request

Send the API key using the HTTP `Authorization` header:

```http theme={null}
Authorization: Bearer fidel80_your_api_key_here
```

For GraphQL requests:

```http theme={null}
POST /graphql/
Content-Type: application/json
Authorization: Bearer fidel80_your_api_key_here
```

## Expiration

An API key can have an optional expiration date. Expired keys can no longer authenticate API requests.

## Revocation

API keys can be revoked from **Developers → API authentication**.

Once revoked, the key can no longer be used.

## Security recommendations

* Never expose an API key in frontend or browser code.
* Store API keys in server-side environment variables or a secrets manager.
* Use separate keys for separate integrations where appropriate.
* Revoke keys that are no longer required.
* Rotate a key if you believe it has been exposed.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.