API keys

Create, protect, and revoke keys.

SpendLens keys authenticate SDK ingest requests and are scoped to your organization.

Create a key

Open Dashboard → API keys.
Choose a descriptive name and select test or live.
Create the key and store it in your secret manager immediately.

Test and live keys

sli_test_... keys are intended for local development and staging and use the Free event allowance. sli_live_... keys are intended for production workloads and use the paid plan allowance. Both authenticate ingest requests; the distinction makes environment usage visible and enforceable.

Key security

SpendLens stores only a SHA-256 hash and the final four characters.
The full key appears once. It cannot be recovered later.
Keep keys out of source control, browser code, logs, and screenshots.
Revoke a key immediately if it may have been exposed.

Revoked keys stop authenticating new ingest requests. Replace the key in your application before revoking it to avoid a reporting gap.