API Keys
API keys authenticate requests to the Sendibl API. Create one per application so you can rotate or revoke them independently.
Create a key
Dashboard → API Keys → Create. Name it after the app that will use it. The full token (sb_...) is shown once— copy it into your app's secret store immediately. Sendibl stores only a hash, so a lost key can't be recovered, only replaced.
Authorization: Bearer sb_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Monitor usage
The key list shows each key's prefix (for matching against your config), its permission, and when it was last used — an easy way to spot dead keys before deleting them.
Rotate or revoke
To rotate: create a new key, deploy it, then delete the old one. Deleting a key immediately rejects any request using it.
Treat keys like passwords: environment variables or a secret manager only. Never commit them to git — including in docs, deploy notes, or tool allowlists — and never paste them into chat logs.