Overview

API keys let you integrate Bugalou with external systems and custom applications. They are used to authenticate requests to all Bugalou REST APIs — whether you're sending WhatsApp templates, managing orders, or tracking invoices. Navigate to Organization Settings → API & Integrations.

Creating an API Key

1. Click "Create API Key" in the top right
2. Enter a Name for the key (e.g. "Production API", "Staging Environment")
3. Click "Create Key"
4. The full key is shown once in a green card — copy it now! Click "Copy" and then "I've Saved My Key"

Important: The full key is only shown once. After you confirm, only the prefix (bg_live_••••••••) is visible.

Managing Keys

Each API key card shows:

• Name — the key name you chose
• Status badge — "Active" (green) or "Disabled" (gray)
• Prefix — masked key: bg_live_••••••••
• Created — creation date
• Last used — when the key was last used for an API call

Key Actions

• Disable / Enable — temporarily disable a key without deleting it
• Revoke — permanently delete the key (with confirmation dialog)

Authentication

Include your API key in every request using one of two methods:

• X-API-Key: bg_live_your_key_here — custom header
• Authorization: Bearer bg_live_your_key_here — Bearer token

Both methods work across all API endpoints.

Security Best Practices

• Never share your API key in public code repositories
• Use environment variables to store keys in your applications
• Create separate keys for production and staging environments
• Disable or revoke keys that are no longer needed
• Rotate keys periodically — create a new key, update your integrations, then revoke the old one

Available APIs

Once you have an API key, you can use the following REST APIs:

• WhatsApp Templates API — send template messages programmatically
• Orders & E-commerce API — manage orders from webshops and custom systems
• Invoicing & Payments API — track invoices, payments, and financial data