> ## Documentation Index
> Fetch the complete documentation index at: https://docs.wazobiamail.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# API keys

> One key for sending and every API operation, created in your dashboard.

# API keys

One key does everything. Create it in your dashboard while logged in, then send it as `X-API-Key` on any API call — sending, domains, mailboxes, attachments, tracking, billing and the rest. The same key works everywhere, so your services only store one secret.

<Warning>
  The secret is shown once when you create or regenerate it. Copy it into your
  secrets manager immediately — it cannot be shown again.
</Warning>

## Rotate and revoke

Regenerate or revoke a key anytime from the same dashboard screen. Regenerating
replaces the secret; revoking stops it at once. Update your services with the
new secret after a rotation.

## Sessions are separate

Logging in (email and password, code, magic link or OAuth) returns short-lived
access and refresh tokens for dashboard use. Services and scripts use the API
key; browsers use the login session. Read [Authentication](/docs/guides/authentication)
for the sign-in flows.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.