> ## Documentation Index
> Fetch the complete documentation index at: https://docs.keystoneb2b.io/llms.txt
> Use this file to discover all available pages before exploring further.

# API Keys

> How retail partners access your inventory through the Keystone Inventory API.

<Note>
  **Who this is for:** Brand administrators coordinating partner integrations, and integration developers building against the API. API keys are not created inside the Keystone app.
</Note>

The [Inventory API](/inventory-api/overview) lets retail partners and integrators query your brand's sellable inventory by SKU, region, and incoming purchase order dates — without logging into Keystone.

## How partners get access

API keys are **issued per tenant by the Keystone team**. They are not self-service in the app dashboard.

To request a key, contact your Keystone account representative or email [support@keystoneb2b.io](mailto:support@keystoneb2b.io). Include:

* Your company name
* The partner or system that will use the key
* Whether you need production or staging credentials

## Using a key

Partners send the key in the `Authorization` header of every request:

```http theme={null}
Authorization: Bearer <api_key>
```

See the [Authentication guide](/inventory-api/authentication) for full integration instructions, base URLs, and security requirements.

## Security best practices

<Warning>
  API keys are **server-side only**. Never embed them in browsers, mobile apps, or public repositories.
</Warning>

* Issue one key per partner integration.
* Rotate keys immediately if you suspect exposure.
* Revoke access promptly when a partner relationship ends.
* Use HTTPS for all requests (enforced on the production endpoint).

To rotate or revoke a key, contact [support@keystoneb2b.io](mailto:support@keystoneb2b.io).

## Related

* [Inventory API overview](/inventory-api/overview) — endpoints and response format
* [Field reference](/inventory-api/field-reference) — data model for inventory and future POs
* [Integrations overview](/integrations/overview) — inbound data sources that feed the API