> ## Documentation Index
> Fetch the complete documentation index at: https://docs.tapify.app/llms.txt
> Use this file to discover all available pages before exploring further.

# Authentication

> Create and use an API key for your Tapify Teams workspace.

Every request needs an API key. The key tells Tapify which workspace the request can access.

Only workspace owners and admins can create or delete API keys.

## Create an API key

1. Log in to the [Tapify dashboard](https://tapify.app/login).
2. Confirm that the correct workspace is selected.
3. Open **Settings → API keys**.
4. Select **Create API key**.
5. Give the key a clear name, such as `HubSpot sync` or `Internal CRM`.
6. Copy and store the key securely.

<Warning>
  Treat an API key like a password. The complete key is shown only once. Never place it in a mobile app, browser code, public repository, screenshot, or support message.
</Warning>

## Authenticate a request

Send the key as a bearer token in the `Authorization` header:

```http theme={null}
Authorization: Bearer YOUR_API_KEY
```

For example:

```bash theme={null}
curl https://tapify.app/api/v1/me \
  --header "Authorization: Bearer YOUR_API_KEY"
```

The bearer header is recommended. Tapify also accepts the `X-API-Key` header:

```http theme={null}
X-API-Key: YOUR_API_KEY
```

## Invalid keys

A missing, incorrect, or deleted key returns `401 Unauthorized`:

```json theme={null}
{
  "error": {
    "code": "invalid_api_key",
    "message": "API key is invalid or revoked."
  }
}
```

Check that the request contains the complete key without extra spaces. If the key was deleted, create a new one.

## Delete an API key

Delete a key when an integration no longer needs it or when the key may have been exposed:

1. Open **Settings → API keys**.
2. Find the key by its name or visible prefix.
3. Select **Delete** and confirm.

Requests using the key stop working immediately. If an integration must keep running, connect it with a new key before deleting the old one.