An API key lets your application authenticate with the WayinVideo API.
Create and manage API keys from My Workspace > API in WayinVideo.
Keep your API key private
Treat your API key like a password.
Do not put it in:
Browser-side code
Mobile app source code
Public repositories
Screenshots or shared documents
Client-facing templates
Logs that other people can access
Store API keys in a secure server-side environment, secret manager, or environment variable system.
Use separate keys where possible
For production workflows, it is usually safer to use separate keys for separate apps, environments, or vendors.
This makes it easier to rotate or revoke one key without breaking every integration at once.
Rotate or revoke a key
Rotate a key if:
A team member who used the key leaves
A vendor or contractor no longer needs access
The key may have been exposed
You are moving from testing to production
You want to follow a regular security schedule
Revoke a key immediately if you believe it was leaked or used without permission.
If authentication fails
If your API request fails with an authentication or permission error, check:
The key was copied correctly
The key is still active
The request is using the current API authentication format
Your account has access to the API feature you are calling
Your account has enough API Units for the task
For exact headers and error examples, see the API Authentication documentation.