Skip to main content

​
Generating an API key

  1. Go to API Keys in the dashboard
  2. Click Generate new key
  3. Enter your product URL — we’ll automatically extract your product name and description
  4. Review the generated product context (name, description, key features, target customers)
  5. Click Create key
Your key will be shown once. Copy it immediately and store it securely.
If you lose your API key, you’ll need to generate a new one. There is no way to retrieve an existing key after it’s been shown.

​
Product context

Every research is generated against your product — its name, description, key features and target customers — so the insights are about what you actually sell. Your account has one product, shared by every key and by the Chrome extension and the Autopilot. Edit it under Settings → Product in the dashboard.
Older accounts may still have more than one product from before this changed. Only the current one is used for new research.

​
Key format

Keys always start with cp_live_ followed by 42 random characters.

​
Using your key

Pass your key as a Bearer token in the Authorization header:

​
Key limits by plan

​
Security best practices

API keys should only be used server-side. Never include them in browser JavaScript, mobile apps, or public repositories. Use environment variables instead.
Generate a new key periodically and update your integrations. Delete old keys from the dashboard once they’re no longer in use.
Use different keys for development, staging, and production. This way you can revoke a compromised dev key without affecting production.
Immediately delete the key from the dashboard and generate a new one. Check your research logs in the dashboard to identify any unauthorised usage.

​
Revoking a key

Go to API Keys in the dashboard, find the key and click Revoke. Revocation is immediate — any requests using that key will return 401 invalid_key.