API keys

Use a public/private key pair for the Braqs API. Your public key identifies your dealership; your private key authenticates requests. 

Generating keys

Sign in at /app/login, then go to API access → API keys.

If you don't have keys yet, click Generate. You'll get two values:

• Public key - prefixed bpk_live_. Safe to log, safe to send in headers, safe to share with support. On its own it can't do anything.
• Private key - prefixed bsk_live_. Treat it like a password. Never put it in front-end code, screenshots, public repos, or chat messages.

Both keys are scoped to your dealer account. They cannot be used to reach another dealership's data.

Viewing keys later

The private key is stored encrypted, but reversibly. You can view it again whenever you need to - just click Show on the API keys page. No need to write it down on first creation.

Regenerate

Use this if you think your private key has leaked, or you want to rotate keys on a schedule. The new pair becomes active the moment you click; the old pair stops working immediately. Update your clients before regenerating, not after.

Revoke

Kills the key pair without issuing a replacement. Use this when you're shutting down an integration or no longer need API access. You can always generate a fresh pair later from the same page.

Who can manage keys

Only the master account holder for a dealership can create, regenerate, or revoke keys. CRM sub-users will not see the API keys page.