Enabling the API

Turn on the API, create an access key with only the permissions it needs, and get the authorization token every request will use — all from Organization → Integration/API.

Published 2026/08/26

Activating the API

Go to Organization → Integration/API and turn on the Active switch. This may require a plan upgrade or add-on depending on your subscription — check Billing if the switch is unavailable.

Creating an Access Key

Once active, click Create to generate an access key. Give it a title and choose which permissions it grants — see Access Roles below for the full list. Create separate keys for separate integrations (your careers site, your LMS, a Zapier connection) so you can revoke or scope each one independently instead of sharing a single all-access key everywhere.

Finding Your Private Key and Authorization Token

Open the key icon on any access key's row to reveal both values, each with a copy button:

Private Key — the raw secret for this access key.
Authorization Token — the value you actually put in every request's Authorization header. It's your organization ID and private key combined and encoded together, generated for you so you never have to build it by hand.

If a key is ever exposed, open its menu and reset it — the old private key and authorization token are invalidated immediately and new ones are generated in their place.

Each access key is granted one or more of nine permissions — grant only what an integration actually needs, since every key can be scoped independently.