Your API key is on the API page, in the ORCHESTRATION section of the left menu. Click the copy icon next to the key to copy it.
Find and copy your key
Go to API in the left menu. The page is called API & Webhooks.
Under API Key, only the start of your key is shown. To see all of it, click the eye icon (Show API key).
Click the copy icon (Copy) next to the field. The app confirms: "API Key copied to clipboard".
Paste the key where you need it: in the
x-api-keyheader of your requests, or in the tool you connect to Enrow (Clay, Zapier, Make, n8n…).
Each account has one API key. You can't create several keys, for example one per environment or per client.
You don't see a key
"API access not included in your plan": the Free plan doesn't include the API. See API access: which plans include it and how to test the API.
You just bought a plan and still see this message: reload the page. If the message doesn't go away, contact support.
"API access not enabled": you are a member of a team, and the owner or an admin hasn't given you API access. Ask them to turn it on.
"API access locked": your team membership is suspended. Contact your team admin.
Reset your key
Reset your key if it may have leaked (for example, if it was published in code or shared by mistake), or to cut off a person or a tool that uses it.
Go to API in the left menu.
Click the reset icon (Reset API key) next to the key.
Read the warning: "Your current API key will be permanently invalidated. Any integration using this key will stop working immediately." Click Confirm.
The app shows "API key renewed successfully". Copy the new key.
The old key stops working right away. Paste the new key everywhere you used the old one: your code and servers, Clay, Zapier, Make, n8n, Cargo, and any AI assistant you connected with the key. Until you do, these tools get the error "This apikey is not valid".
In a team
The team shares one API key. Owners and admins can see it. Members see it only if the owner or an admin has turned on their API access in Team.
Only the team owner can reset the team's key. Members see the message "This is your team's API key. Only your team owner can reset it."
When you turn off a member's API access, they can no longer see the key in the app. If they copied it before, they can still use it: reset the key to fully remove their access.
Keep your key safe
Anyone who has your key can use your credits. Treat it like a password:
Never put it in a public repository, in website code that runs in the browser, or in a mobile app. Keep it on your server, for example in an environment variable.
If your product stores the Enrow keys of your own users, encrypt them.
If you are not sure who has your key, reset it.