Authentication

API keys

The Flixer Pro API uses API keys for authentication. Every request must include a valid API key in the X-API-Key header.

curl -X GET "https://api.flixerpro.io/v1/api/leads" \
  -H "X-API-Key: flx_live_abc123..."

Creating a key

Go to Settings > API keys in your Flixer dashboard
Click Create new key
Give the key a descriptive name
Select the required scopes (see below)
Click Create

The full API key is shown only once. Copy it right away and store it securely.

Scopes

API keys have scopes that determine which endpoints are accessible. Always use the minimum scopes required.

Scope	Description	Endpoints
`full`	Full access to all endpoints	All
`leads:read`	Retrieve leads	`GET /leads`
`leads:write`	Create leads	`POST /leads`
`work-items:read`	Retrieve work items	`GET /work-items`

Choosing a scope

Website contact form: leads:write
CRM synchronization: leads:read + work-items:read
Full integration: full

Managing keys

Revoking a key

If a key is compromised or no longer needed:

Go to Settings > API keys
Find the key in the list
Click Revoke

Revoked keys stop working immediately. Make sure your application uses a new key before you revoke the old one.

Security tips

Never store keys in code

Use environment variables or a secrets manager:

// Good
const apiKey = process.env.FLIXER_API_KEY;

// Bad - never do this!
const apiKey = "flx_live_abc123...";

Use server-side calls

Always make API calls from your backend, never directly from the browser. API keys in frontend code are visible to everyone.

Rotate keys regularly

Periodically create new keys and revoke old ones. This limits the impact if a key is accidentally leaked.

Use minimal scopes

Give each key only the scopes it needs. A contact form does not need full access.

Error codes

HTTP Status	Meaning
`401 Unauthorized`	API key is missing or invalid
`403 Forbidden`	Key does not have the required scope

See Error handling for more details.

Getting started

Guides

Reference

API keys

Creating a key

Scopes

Choosing a scope

Managing keys

Revoking a key

Security tips

Error codes

​API keys

​Creating a key

​Scopes

​Choosing a scope

​Managing keys

​Revoking a key

​Security tips

​Error codes

API keys

Creating a key

Scopes

Choosing a scope

Managing keys

Revoking a key

Security tips

Error codes