Need to push testimonials into VideoTestimonials from an external system? API keys let any tool — your backend, a CRM webhook, an automation tool, a cron job — read and write data in your workspace programmatically.
Create a key
- Go to Dashboard → Settings → API Keys.
- Click + Create New Key.
- Enter a name (something descriptive like "HubSpot webhook" or "Internal cron").
- Pick the scopes you want: Read, Write, Delete (all three are ticked by default). Most integrations only need Read + Write.
- Click Create Key.
The full key is displayed once, right after creation. Copy it immediately — we store it hashed, so if you close the modal without copying, you'll need to generate a new one.
Using the key
Pass the key as a bearer token in the Authorization header:
Authorization: Bearer sk_live_<your-key>
All our public endpoints under /api/v1/ accept this header. The v1 API covers spaces and testimonials (including batch updates and deletes); see Does VideoTestimonials have an API? for the endpoint list, or the API reference.
Key scopes
- Read — list and fetch spaces and testimonials.
- Write — create testimonials and spaces, update a testimonial's status, text, rating, company, or role, and batch-update testimonial status.
- Delete — remove testimonials and spaces (dangerous — only grant when required).
Rotating and revoking keys
- On the API Keys page, each key shows a Last used date once it has been used. If a key hasn't been used in months, it's safe to delete.
- To rotate a key, create a new one, update your integration to use the new key, then delete the old one.
- If a key leaks, click Disable to block it right away (you can re-enable it later), or delete it. A deleted key can't be restored — you'll need to issue a fresh one.
Audit log
Every authenticated request to the /api/v1/ endpoints is logged with the endpoint, method, status code, and response time.