Skip to main content
All public endpoints under /api/v1 require a bearer token.

Generating a key

  1. Open app.inspack.com and sign in.
  2. Go to Settings → Integration → API keys.
  3. Click Add API key, then copy the new key from the list.
The list shows every active key in your organization. If a key is exposed, delete it and add a new one.

Scopes

API keys are scoped to your organization. They can read and run checks you have access to in the portal.

Rotating keys

Treat keys like passwords. Rotate them when:
  • A team member with access leaves.
  • A key may have been exposed (committed to a repo, logged in plaintext, shared in chat).
  • You haven’t rotated in 90 days.