API keys: push contacts in from anywhere
Last verified 2026-07-01
Where: Settings → API keys
Creating a key
- Keys start with klo_ and are shown once, at creation. Copy it then — it can't be shown again.
- Only a fingerprint of the key is stored, never the key itself.
- Revoke a key any time; revoked keys stop working immediately.
Using it
Send contacts to the ingest endpoint with the key as a bearer token. Incoming rows pass the same validation gate and duplicate detection as a CSV import, and land scoped to your workspace — the key decides where data goes, never the request.
Treat a key like a password. If it may have leaked, revoke it and create a new one.