Finding your API key
Log in to your dashboard
Go to wsapi.chat/app/settings.
Using your API key
Include theX-Api-Key header in every request alongside the X-Instance-Id header:
Security best practices
- Never expose your key in client-side code — keep it server-side only
- Don’t commit keys to version control — use environment variables instead
- Rotate immediately if compromised — generate a new key from your dashboard
- Use environment variables in your application:
Rotating your API key
If you lost your API key or suspect it has been exposed, rotate it using the Rotate API Key button in the same section of your dashboard. This will invalidate the old key and generate a new one immediately.After rotating your API key, update all applications and integrations that use the old key.