---
title: Create API keys
slug: cms-saas/docs/api-keys
docTags: 
createdAt: 2026-07-30T20:18:09.000Z
---

Use API keys to request a token that authenticates with the [CMS (SaaS) REST API](docId\:UBbVVvgyfOQzyLOTn4KMH).   To create an API key with code, see [Create API Client](docId:2uVhCnJr4BdL9e5UNkN4L).

You can add one or more keys, each with a unique name. Keys display in the list at the bottom of the **API Keys** page.

1. Go to **Settings > API Keys** in your CMS (SaaS) instance.
2. Click **Create API Key**.

::Image[]{src="https://api.archbee.com/api/optimize/BrbvVORKJ5iIeSMZye5kI/ytjhtz0igSlTKMYON6-q9_cms-create-api-key.png" size="100" isUploading="false" position="center" width="908" height="609" darkWidth="908" darkHeight="609" showCaption="false" indent="1"}

:::Paragraph{listStyleType="disc" indent="2"}
**Address**  – The URL or endpoint where the API can be accessed. It is the location on the web where requests are sent to interact with the API.
:::

:::Paragraph{listStyleType="disc" indent="2"}
**Single key** – A unique identifier that authenticates a client making a request to an API. It is often a token or string that grants access to the API's services or data, ensuring that only authorized users or applications can interact with the API.
:::

:::Paragraph{listStyleType="disc" indent="2"}
**App key** – A publicly exposed string that is used by the server to identify the application making the request. The **App key** associates API requests with your application.
:::

:::Paragraph{listStyleType="disc" indent="2"}
**Secret** – A secret known only to the application and the authorization server to authenticate the identity of the application to the authorization server when the application requests to access a protected resource.
:::

3. Enter a **Name** and click **Create API Key**. The **Name** can only contain letters, numbers, hyphens, and underscores.

![](https://api.archbee.com/api/optimize/BrbvVORKJ5iIeSMZye5kI/lND2YyTF2JxSghzUgOu0Y_5bdbbbc4d118aed8fdb1063566cfefc4f1997050d467e696e7de18618b47f2bc-image.png)

4. Save the **Client ID** and **Secret** that automatically populate in a secure location.

:::hint{type="warning"}
**Important**
You cannot view the **Client ID** and **Secret** again after you close the **Save your Secret** window, so ensure you save them to use later.
:::

![](https://api.archbee.com/api/optimize/BrbvVORKJ5iIeSMZye5kI/ojOLVnIsR_nrBA_k6Uxk__e55063cca5df1d45ec374316e7c4f8b3a1a52caba76a5bb3ed12a4a52709c017-image.png)

5. Click **Done**.

You can restrict what operations the API Key can execute. See the [Authorization](docId:2uVhCnJr4BdL9e5UNkN4L) section.