API Keys

API keys authenticate your external integrations with Crove. Use them for the REST API, Zapier connections, and other third-party integrations.

Creating an API key

1. Go to Settings > API Keys
2. Click Create API Key
3. Enter a descriptive name:
   • "Production API" for your main application
   • "Zapier Integration" for Zapier
   • "Staging" for development/testing
4. Click Create
5. Copy the key immediately

Managing keys

Viewing keys

The API Keys page shows all your keys with:

• Name — The descriptive name you gave it
• Created — When the key was created
• Last used — When the key was last used in an API request

Revoking a key

To revoke (disable) a key:

1. Find the key in the list
2. Click Revoke
3. Confirm the action

Usage recommendations

One key per integration

Create separate API keys for each integration:

This way, you can revoke a single key without affecting other integrations.

Key rotation

Periodically rotate your API keys for security:

1. Create a new API key
2. Update your integration to use the new key
3. Verify everything works
4. Revoke the old key

Environment separation

Use different keys for different environments:

# .env.local (development)
CROVE_API_KEY=crove_dev_xxx

# .env.production (production)
CROVE_API_KEY=crove_prod_yyy

Security

• Never commit keys to version control — Use environment variables
• Never expose keys in client-side code — API calls should be made from your server
• Use HTTPS — All Crove API requests must use HTTPS
• Monitor usage — Check "Last used" dates to identify unused keys and revoke them
• Limit access — Only create keys for team members who need API access

Quotas

API key usage counts toward your plan's monthly API quota. Check your current usage at Settings > API Keys or via the Rate Limits endpoint.