API keys - Keette Developers

Manage keys in Settings → Developers → API keys (business workspaces with Developers access). The public API only accepts keys for approved business workspaces. Individual accounts and workspaces still under review receive 403.

Rules

Rule	Detail
Workspace	Business kind, approved status, Developers access enabled
Prefix	`sk_live_…` (live) or `sk_test_…` (sandbox)
Expiry	Required. Maximum 90 days from creation.
Secret	Shown once at create. Prefix stays visible in the table.
IP allowlist	Optional. Empty means any IP. `0.0.0.0/0` = any IPv4; `::/0` = any IPv6. Clients behind IPv6 egress need `::/0` (or both) or requests will 403.
Revoke	Immediate. In-flight requests fail on the next call.

Dashboard

Admins and developers can create keys and edit allowlists. Revoke may require a transaction PIN. Operators and viewers cannot.

curl https://api.keette.com/v1/me \
  -H "Authorization: Bearer sk_test_…"