API Keys

API keys are the primary authentication method for the moncreneau API.

Creating an API Key

1. Log in to your moncreneau dashboard
2. Navigate to Settings → API
3. Click Create an API key
4. Fill out the form:
   • Name: Description of usage
   • Environment: Development or production environment
   • Scopes: Required permissions
   • Rate limit: Default 1000/hour

Only Once

The complete key is only displayed once during creation. Copy it immediately!

Key Rotation

Change your keys regularly for better security:

1. Create a new key
2. Update your application
3. Revoke the old key

Revocation

A revoked key becomes immediately inactive. All requests with this key will receive a 401 error.

What API keys can't do

An API key only authenticates the public /api/v1/** endpoints (appointments, departments, availability). It grants no access to managing API keys themselves, webhooks, or the usage dashboard — those three areas (API Keys, Webhooks, Usage) are reserved for the web dashboard, for a logged-in staff user. No third-party application can reach them programmatically.

Next Steps

• Understand scopes
• API Configuration