Documentation Index
Fetch the complete documentation index at: https://docs.callprep.app/llms.txt
Use this file to discover all available pages before exploring further.
Generating an API key
- Go to API Keys in the dashboard
- Click Generate new key
- Enter your product URL — we’ll automatically extract your product name and description
- Review the generated product context (name, description, key features, target customers)
- Click Create key
Product context
Each API key is tied to a product context — the name, description, key features, and target customers of your product. This context is sent to an AI agent for every research request, so all generated insights (synergy points, discovery questions, opening talks) are personalised to your specific product. You can have multiple keys with different product contexts — useful if you sell multiple products or to different market segments.Key format
cp_live_ followed by 42 random characters.
Using your key
Pass your key as a Bearer token in theAuthorization header:
Key limits by plan
| Plan | API keys |
|---|---|
| Free | 1 |
| Starter | 3 |
| Growth | 10 |
| Scale | Unlimited |
Security best practices
Never expose keys in client-side code
Never expose keys in client-side code
API keys should only be used server-side. Never include them in browser JavaScript,
mobile apps, or public repositories. Use environment variables instead.
Rotate keys regularly
Rotate keys regularly
Generate a new key periodically and update your integrations.
Delete old keys from the dashboard once they’re no longer in use.
Use separate keys per environment
Use separate keys per environment
Use different keys for development, staging, and production.
This way you can revoke a compromised dev key without affecting production.
If a key is compromised
If a key is compromised
Immediately delete the key from the dashboard and generate a new one.
Check your research logs in the dashboard to identify any unauthorised usage.
Revoking a key
Go to API Keys in the dashboard, find the key and click Revoke. Revocation is immediate — any requests using that key will return401 invalid_key.