Who this is for: Brand administrators coordinating partner integrations, and integration developers building against the API. API keys are not created inside the Keystone app.
How partners get access
API keys are issued per tenant by the Keystone team. They are not self-service in the app dashboard. To request a key, contact your Keystone account representative or email support@keystoneb2b.io. Include:- Your company name
- The partner or system that will use the key
- Whether you need production or staging credentials
Using a key
Partners send the key in theAuthorization header of every request:
Security best practices
- Issue one key per partner integration.
- Rotate keys immediately if you suspect exposure.
- Revoke access promptly when a partner relationship ends.
- Use HTTPS for all requests (enforced on the production endpoint).
Related
- Inventory API overview — endpoints and response format
- Field reference — data model for inventory and future POs
- Integrations overview — inbound data sources that feed the API
