API keys are required to authenticate every server-side request to the duochat API. Each API key represents an application and controls access to messaging features, WhatsApp sessions, and webhook configuration. Requests without a valid API key will be rejected.

Where to Find Your API Keys

You can generate API keys directly from the duochat dashboard.

Steps to generate API tokens

1. Open the duochat dashboard
2. Click the Settings icon in the bottom-left corner
3. Go to API Tokens
4. Click on Generate New Token
5. Enter a name for your token
6. Click Generate Token

Once created, copy the token and store it securely. For security reasons, full tokens are not shown again after leaving the page.

Best Practices for API Keys

• Never expose API keys in frontend code
• Store keys in environment variables
• Use separate keys for development and production
• Revoke unused or compromised keys immediately