Dashboard
Manage API keys
Create and revoke mobile and secret keys for an app.
Open API keys in your app. The list includes active and revoked keys.
Create a key
- Choose the key type: secret for a backend, mobile for the SDK.
- Give it a label that identifies where it will be used.
- Create the key and copy its value.
| Type | Allowed use | Readable after creation |
|---|---|---|
Secret, carillon_sk_live_… | Send, read delivery results, manage devices | No; copy it before closing the dialog |
Mobile, carillon_mk_live_… | Register devices and report open events | Yes |
Revoke a key
Revocation takes effect immediately. Requests using that key are rejected.
Before revoking a secret key, deploy its replacement to your backend. Before revoking a mobile key, check which installed app versions still use it. Keep it active while you support those versions.
See key rotation for the complete procedure.