API Key Management & Security

API keys allow your applications to authenticate with the Chatofy API. Keys are AES-256-GCM encrypted at rest and scoped to specific permissions.

Generating an API Key

1. Navigate to Settings → API
2. Click "Generate New Key"
3. Enter a name for the key (e.g., "Production App")
4. Select the permission scopes required
5. Click "Generate"
6. Copy the key immediately — it will not be shown again

Permission Scopes

• messages:send — Send messages via API
• contacts:read — Read contact data
• contacts:write — Create and update contacts
• campaigns:read — View campaign data
• campaigns:write — Create and manage campaigns
• templates:read — View message templates
• analytics:read — Access analytics data

Revoking API Keys

To revoke a key, go to Settings → API, find the key in the list, and click "Revoke". The key will be immediately invalidated. Any service using this key will stop working.