API
API security
How keys, scopes, and rate limits work.
Keys are stored as a hash. VeloSend cannot show a key again after it is created.
Rules
- Scopes limit what a key can do. A read-only key cannot create contacts or send campaigns.
- A key with messages:send can email one person from a template and save that person on a list in the same project.
- Revoke a key from Developer API if it leaks. Revoked keys fail immediately.
- Each key allows 120 requests per minute. Extra requests return HTTP 429.
- Call the API from the brand's backend. Do not put the key in browser JavaScript.