Managing API Keys

Create and manage your API keys from Dashboard → API. You can have up to 5 active API keys per account — use one per application or environment so you can rotate or revoke each independently.

Creating a key

1. 1
   Navigate to the API page in the sidebar.
2. 2
   Click Create New API Key.
3. 3
   Give the key a name (e.g. "Production", "Staging").
4. 4
   Optionally set an expiry date after which the key is automatically revoked.
5. 5
   Optionally add an IP allowlist (comma-separated IPs or CIDRs) to restrict which addresses can use the key.
6. 6
   Click Create. Copy the key immediately — it is shown only once.

Using a key

Send it in the X-API-Key header of every request. See the API Overview for a first call.

Rotating a key without downtime

1. Create a second key.
2. Deploy it to your application and confirm requests succeed.
3. Delete the old key.

Deleting and disabling

Click the delete icon next to a key to remove it immediately; every request using it will return 401 from that point on. You can also switch a key off and on again without deleting it.

Keys revoked by Pingovo

If we see signs that a key has been compromised or is being misused, we may revoke it. A key revoked by Pingovo shows as Revoked with a neutral reason (for example “suspected compromised key” or “account review”), you are emailed, and calls with it return 403 API_KEY_REVOKED. Unlike a key you switched off yourself, it cannot be re-enabled, renamed or deleted from the dashboard — contact support to review it. Your other keys keep working unless the account itself is suspended.

Key properties