Saved in this browser for 24 hours, then removed. Validate checks the key shape in this browser, then confirms it is active. After 8 checks, this browser pauses the button for 15 minutes. Sending a request below still changes live data for the key's project.

API

API security

How keys, scopes, and rate limits work.

Keys are stored as a hash. VeloSend cannot show a key again after it is created.

Rules

  • Scopes limit what a key can do. A read-only key cannot create contacts or send campaigns.
  • A key with messages:send can email one person from a template and save that person on a list in the same project.
  • Revoke a key from Developer API if it leaks. Revoked keys fail immediately.
  • Each key allows 120 requests per minute. Extra requests return HTTP 429.
  • Call the API from the brand's backend. Do not put the key in browser JavaScript.