1

Open Profile → API Keys

Click your username in the top right corner and select Profile. Scroll down to the API Keys section, or navigate directly to Profile → API Keys in the menu.

2

Click "Generate new key"

Enter a descriptive name for the key — something that makes it clear what it is used for, e.g. CI pipeline or Grafana monitoring. Optionally set an expiry date if you want the key to stop working automatically.

3

Copy the key immediately

After saving, the full key is shown once. Copy it now and store it in a secrets manager or your CI environment variables.

The key is only shown once. If you close the dialog without copying it, you will need to delete it and create a new one.
4

Use the key in API requests

Send the key as a Bearer token in the Authorization header on all API requests:

# Example: list all endpoints curl https://app.certcontrol.pro/api/endpoints \ -H "Authorization: Bearer cwp_YOUR_KEY_HERE"

Keys with the cwp_ prefix are personal access tokens tied to your user account. They have the same permissions as your user role.

CI pipelines: Store the key as an environment variable (e.g. CERTCONTROL_TOKEN) and never hardcode it in your scripts or commit it to source control.
5

Revoke a key when no longer needed

Go back to Profile → API Keys and click Delete next to the key. It stops working immediately. Revoke keys as soon as they are no longer in use — for example when a team member leaves or a CI job is decommissioned.