API Authentication

Keep'em uses API keys for authentication. Each project has two types of keys.

Secret Keys

Prefix: sk_live_*

Secret keys carry full permissions and are used for backend-to-backend communication. Include them in the Authorization header:

curl https://api.keepem.io/v1/events \
  -H "Authorization: Bearer sk_live_your_key"

Never expose secret keys in client-side code, public repositories, or frontend applications.

Publishable Keys

Prefix: pk_live_*

Publishable keys have limited permissions and are safe for client-side use. They're used by the embedded widget for viewer-facing operations like creating sessions and sending chat messages.

<script
  src="https://cdn.keepem.io/assets/embed.min.js"
  data-event="evt_your_event_id"
  data-key="pk_live_your_key"
></script>

Key Management

Generate, rotate, and revoke keys from Settings → API Keys in the dashboard. Rotating a key immediately invalidates the old one — update your integrations before rotating. See API Keys for a walkthrough of the dashboard UI.