Your Mailcamp API key allows another application to make authenticated API requests to your account. Treat it like a password.
Use the API key only on trusted servers or backend systems. Do not paste it into public websites, frontend code, or shared documents.
The API key is available from your Mailcamp account when your plan has API access.
Open Mailcamp.
Go to the API key or API docs area shown in your account.
Review the API endpoint shown on the page.
Use the show or copy controls when you need to copy the key.
If the API key page says API key management has moved, open Transactional > API docs or the API docs link from the support menu.
Renew the key when you want to replace the current credential.
Go to the API key management page.
Click Renew token.
Update the key in every application that uses the old token.
Test your integration after replacing the key.
Renewing a token can stop integrations that still use the previous key.
Revoke the key if you no longer use API access or if the key may have been exposed.
Go to the API key management page.
Click Revoke.
Confirm the action.
Check your connected applications and remove the old key.
After revocation, API requests using that key will no longer work.
Store the key in server-side environment variables or a secrets manager.
Give access only to team members who need it.
Rotate the key after staff or vendor changes.
Never commit the key to Git or publish it in screenshots.