Integrations > API Access

API Keys

Create an API key, also called an API token or API secret, to authenticate direct SuperFunnel API requests and backend integrations.

Overview

An API key (also called an API token, or API secret) authenticates requests made directly against the SuperFunnel API, for things like custom backend integrations, CMS automation, or pulling analytics into your own systems.

Not the same as page Tokens

This is different from the dynamic content Tokens you insert into page or quiz copy, like {{first_name}} or {{city}}. If that's what you're looking for, see Add Tokens.

Creating an API Key (Also Called a Token or Secret)

Open API keys settings

From the SuperFunnel dashboard, go to Settings > Integrations > API keys, then click + Create key.

Settings > Integrations > API keys, with the Create key button highlighted

Name your key

A dialog appears where you enter a descriptive name (e.g., "CRM sync", "Backend service"), so it's easier to track which key is used where. Click Create key.

Create API key dialog with a Name field

Copy and save it immediately

The key appears on screen. Click Copy and paste it somewhere secure right away, after you close this dialog, you cannot retrieve it from SuperFunnel again. Click Done once you've saved it.

Your new API key dialog with a warning to copy it now, since it will not be shown again

Save it now or lose it forever

If you lose it, you will need to create a new one.

The key is now active and ready to use. See Authentication in the API Reference for how to send it on requests.

Keys don't expire

API keys currently do not have an expiration date. If you believe a key has been compromised, email support@superfunnel.ai to revoke it.

Keeping keys safe

A SuperFunnel API key can read and change all of the CMS content and analytics in the account it belongs to. Treat it like a password.

  • Store keys in a secret manager or a server-side environment variable, never in browser code, a mobile app, or a public repository.
  • Use a separate key per integration, so one can be revoked without affecting the others.
  • Email support to revoke a key you believe has leaked.

What's Next