Skip to main content
OnePanel supports API keys for server-to-server integrations. User JWTs are also accepted by dashboard-backed requests, but API keys are recommended for integrations.

​
API key header

Send the key in the X-API-Key header:
You can also use the bearer form:

​
Key management

Create, list, and revoke keys from Settings → API keys in the OnePanel dashboard. Store keys as secrets and rotate them if they may have been exposed.
API keys are hashed before storage. The complete raw key is only returned at creation time.

​
Permissions and limits

API keys currently operate with the permissions of their owning business account. Requests are rate limited; use exponential backoff for 429 responses and avoid retrying non-idempotent purchases blindly.