API Access

Want to connect InvoiceKaro to your own systems? API Access lets you create keys for programmatic, system-to-system access — and revoke them the moment they're no longer needed.

Create an API key

1. 1Open Profile → API Access.
2. 2In the API Keys modal, tap Create API Key and give the key a Key Name.
3. 3Copy the key immediately — it's shown only once ("This key will only be shown once"), so store it securely and treat it like a password.
4. 4Use the key in your integration to authenticate requests to InvoiceKaro.

Revoke a key

If a key is no longer needed — or you suspect it's been leaked — revoke it from the API Access screen. Once revoked, any request using that key stops working immediately, so rotate it before it's misused.

1. 1Open Profile → API Access and find the key.
2. 2Choose Revoke.
3. 3Create a fresh key and update your integration if you still need access.

Keep keys safe

• Store keys in a secrets manager or environment variable, never in plain code.
• Use a separate key per integration so you can revoke one without breaking the rest.
• Revoke keys you no longer use — fewer live keys means less to worry about.