Skip to main content
An API key is how your server proves it’s you when it talks to Minisend, for example to create checkout sessions. Manage them under Dashboard → API Keys.
Keep keys on your server, in environment variables. Never put them in website code, a mobile app, or a public code repository.

​
What a key looks like

The list only shows the start of each key (like ms_live_abc123...). We show the full key once, when you create it, and we don’t keep a readable copy.

​
Create a key

1

Open API Keys

Click API Keys in the sidebar.
2

Click New Key

It’s in the top right.
3

Give it a name

Something like Production or Staging. If you leave it blank, it’s called Default.
4

Copy it now

The key appears in a banner. Copy it and store it somewhere safe. Once you close the banner, you can’t see it again and would need to create a new key.
You can create several keys, for example one for each environment. Revoking one doesn’t affect the others.

​
Use it in requests

​
Revoke a key

Hover over the row and click the trash icon. The key stops working straight away, and any request using it gets a 401.
You can’t undo revoking a key. If your live server uses it, switch the server to a new key first.

​
Good habits

  • Replace your keys now and then, and straight away if one might have been seen by someone else.
  • Use a different key for each environment.
  • Store the key in an environment variable on your server (like MINISEND_API_KEY), not written into your code.
  • If a key ends up in a public code repository by accident, revoke it and create a new one.