Skip to main content
Go to Settings → Developers. The page shows the API base URL, your API keys and your webhook log.
The Developers page with the base URL, the authorization header and the API keys
Only administrators can manage API keys. API access depends on your plan.

​
Create an API key

1

Click New API key

2

Name the key

Use one key per app or integration, so you can revoke one without breaking the others. You can also say how you will use it. This helps our team support you.
The New API key dialog
3

Click Create key, then copy it

Send the key in the Authorization header of every request:
Keep your keys secret. Anyone with a key can issue credentials from your organization.
To revoke a key, open the menu on its row and click Revoke key. Every app that uses it stops working at once. Credentials already issued with it are not affected. See the API guide for every endpoint.

​
Webhooks

Hyperstack can call your endpoint each time a credential is issued. To set up the endpoint, call Subscribe to webhook with your URL and the credential.issued event. The Webhooks section then shows your endpoint and a log of every webhook sent in the last 90 days, with its payload and your endpoint’s reply. Use it to find out why a webhook failed.
The webhook log with delivered and failed webhooks
See Webhook events for the payload.
Last modified on October 20, 2026