# API Keys

> Create, use, and delete AnyTrack API keys. Read your properties and reports through the AnyTrack API, and find the API reference.

An API key gives read-only access to all properties and reports in your AnyTrack account. Use a key to read your data from your own tools or scripts.

API keys belong to the account. They keep working if the person who created them leaves the account.

## Before you start

- Your user role must allow access to **API Keys**. If you do not see the screen, your role may not allow it. Ask your account owner to check your role in [Team Management](/docs/team-management).
- Read the [AnyTrack API reference](/api/reference/v1) to choose the endpoints you need.

## Create an API key

1. Click the account menu at the bottom left of the sidebar.
2. Click **API Keys** under **Account settings**.
3. Click **Create New Key**.
4. Enter a **Key Name**. Use a name that shows what the key does, for example `Data warehouse sync`.
5. Click **Create**.
6. Click **Copy**, or click **Download** to save the key as a text file.

AnyTrack shows the key one time. Store it in a secure place. If you lose the key, delete it and create a new one.

## Send the key with a request

Send the key in the `Authorization` header. Add the word `Bearer` before the key:

```text
Authorization: Bearer YOUR_API_KEY
```

Every key starts with `atk_`.

## Delete an API key

1. Open **API Keys** from the account menu.
2. Click the delete icon in the row of the key.
3. Click **Delete** to confirm.

AnyTrack rejects requests that use the deleted key immediately. You cannot undo the deletion. A request that uses a deleted key returns the response code `401`.

<FaqAccordion
  title="Frequently Asked Questions"
  icon="fa-duotone fa-circle-question"
  items={[
    {
      question: "Can an API key change my data?",
      answer: "No. An API key gives read-only access to all properties and reports in the account."
    },
    {
      question: "Why do I not see API Keys in the account menu?",
      answer: "API Keys appears only when your account has access to this feature. Your role must also allow it. Ask your account owner to check your role in Team Management."
    },
    {
      question: "Why does my request return 401?",
      answer: "The key is missing, invalid, or deleted. Check that the request sends the full key in the Authorization header, with the Bearer prefix."
    }
  ]}
/>