API Authentication

Keep'em uses API keys for authentication. Each project has two types of keys.

Secret Keys

Prefix: sk_live_*

Secret keys carry full permissions and are used for backend-to-backend communication. Include them in the Authorization header:

curl https://api.getkeepem.com/v1/events \
  -H "Authorization: Bearer sk_live_your_key"

Never expose secret keys in client-side code, public repositories, or frontend applications.

Publishable Keys

Prefix: pk_live_*

Publishable keys have limited permissions and are safe for client-side use. They're used by the embedded widget for viewer-facing operations like creating sessions and sending chat messages.

Keepem.init({
  publishableKey: 'pk_live_your_key'
});

Key Management

Generate, rotate, and revoke keys from Project Settings → API Keys. Rotating a key immediately invalidates the old one — update your integrations before rotating.