API Key

An API key is a unique, secret code an application uses to identify itself to an external service. The receiving service checks the key to determine whether the request is allowed and what permissions apply.

API keys should be handled with the same care as passwords: a leaked key can grant unauthorized access to sensitive data or functionality. Regular rotation and scoped permissions are common best practices.

Bugalou offers its own API with managed API keys, so developers can programmatically control conversations, contacts, and automations from their own systems.