Documentation
Security & access

API keys and automation

Create scoped keys, authenticate requests, and rotate safely.

7 minute read ยท Updated September 2026

Create a key

Open API keys, choose a clear name, and select the narrowest scopes required. The secret is shown once. Renviq stores a non-reversible representation for authentication rather than a reusable plaintext copy.

Treat API keys like passwords

Store keys in a secret manager. Never put them in frontend code, screenshots, support tickets, source control, or analytics.

Authenticate

HTTP
Authorization: Bearer rvq_live_REDACTED
Content-Type: application/json

Rotate without downtime

  1. 1Create a replacement key with equivalent scopes.
  2. 2Deploy the replacement to every consumer.
  3. 3Confirm requests authenticate with the new key.
  4. 4Revoke the old key.
  5. 5Review audit and application logs for unexpected failures.
Was this guide useful?

If anything is unclear or incorrect, tell the support team.

Get help