---
title: Authentication
slug: data-platform/api/authentication
docTags: 
createdAt: 2026-06-16T14:18:06.000Z
---

## Public versus Private API Keys

Optimizely Data Platform (ODP) provides two forms of authentication: Public and Private.

:::hint{type="info"}
**Note**
Keys are scoped at the account level.
:::

If you have multiple accounts within ODP, the data within one account is not accessible to the others, you must utilize the appropriate API key.

- **Public API Keys** (sometimes referred to as a Tracker ID) are used for most API calls that send data to ODP and for a limited number of API calls that request data from ODP and may be exposed publicly on the Internet.
- **Private API Keys** can be used for querying data from ODP for backend services and integrations.

:::hint{type="warning"}
**Important**
When you revoke a private API key, your existing key is available for 12 hours as a grace period to ease any transitions.
:::

## Locate API Keys

To view your API keys, go to **Settings > APIs**. The page displays your public and private API keys and a table of available APIs:

![](https://api.archbee.com/api/optimize/BrbvVORKJ5iIeSMZye5kI/zLYtRWEV2EblkjvtOCX_k_77a30f3d3689272e742060571d05acd11f186aae26141f8570bed4563130603f-image.png)

| Table Column | Description                                                                                                                        |
| ------------ | ---------------------------------------------------------------------------------------------------------------------------------- |
| API Name     | The name of the API                                                                                                                |
| Usage Plan   | The usage plan for the API will be `Default`, `No Access` or the name of a custom plan or package that your company has access to. |
| Limits       | The limits placed upon the API, including rate limits and quotas (if applicable).                                                  |

:::hint{type="info"}
**Note**
Public API Key and Tracker ID are synonymous within ODP.
:::

## Using API Keys

To use your API key, include it in the headers of your REST API request. For example:

```curl
curl -iX GET \
'https://api.us1.odp.optimizely.com/v3/profiles?email=sample@test.com' \
-H 'x-api-key: example.apiKey'
```