Developer guide

API keys

Secret keys for server-side actions.

Public reads need no key. Secret keys (created by Admins in API) are for server-side calls only – never put them in browser code. The key is shown once; store it as an environment variable.

bash
curl https://cms.af/api/public/v1/example.com/verify -H "x-api-key: $CMSAF_KEY"

Revoke a leaked key in the dashboard and create a new one.