Skip to main content
Use a Puffle API key to authenticate requests from your backend or agent.

​
Create a key

1

Open API settings

Sign in to the Puffle dashboard and open Settings → API.
2

Generate the key

Click Generate API key, then copy the full key immediately. It is shown only once.
3

Store it securely

Save the key in a server-side environment variable such as PUFFLE_API_KEY. Never expose it in browser or mobile code.

​
Authenticate a request

Send the key as a Bearer token:
An API key grants access to your Puffle account. Do not commit it to source control or include it in client-side code.

​
Replace or revoke a key

Each account can have only one active key. Replacing it requires revoking the current key, generating a new one, and updating every service that uses it. Revocation takes effect immediately, so plan for a brief interruption while rotating credentials.

​
MCP keys are separate

Keys for Puffle MCP are created under Settings → API → MCP integrations, are named and scoped per client, and begin with pmcp_live_. They are not interchangeable with the pk_live_ API key on this page. See Connect Puffle MCP.