How to get your API-keys
What API Keys Do
RobinReach's API Keys allow you to integrate with external applications and services. With an API key, you can:
- Access RobinReach's REST API endpoints
- Create, read, update, and delete posts programmatically
- Manage social profiles and brands
- Integrate with third-party tools and automation platforms
- Build custom applications that interact with your RobinReach account
Prerequisites
- You must have Admin or Account Admin role in your company
- Your company must be on a Bloom or Thrive plan (paid plans only)
- API access is not available on the free Seed plan
How to Get Your API Key
Step 1: Access Brand Settings
- In the sidebar, look for your brand name at the top
- Click on "Default Brand Settings" (for default companies) or "Business Brand Settings" (for other brands)
- You'll be redirected to the company settings page
Step 2: Find the API Key Section
- Scroll down to the "API Key" section
- If you don't have an API key yet, you'll see a "🔑 Generate API Key" button
- If you already have an API key, you'll see the key management interface
Step 3: Generate Your API Key
- Click the "🔑 Generate API Key" button
- A confirmation dialog will appear asking "Generate a new API key for the account?"
- Click "OK" to confirm
- The system will generate your API key and display it on the page
Step 4: Copy Your API Key
- Once generated, your API key will be displayed
- Click the "Reveal" button to show the full key
- Click the "Copy" button to copy the key to your clipboard
- Important: Save this key securely - it won't be shown again in full
Managing Your API Key
Viewing Your Key
- The key is initially masked with dots (••••••••••••••••••••••••••••••••••••)
- Click "Reveal" to see the full key
- Click "Copy" to copy it to your clipboard
Regenerating Your Key
- Click the "🔁 Regenerate Key" button
- A confirmation dialog will appear: "Regenerating the API key will invalidate the current one. Are you sure?"
- Click "OK" to confirm
- The old key will be invalidated and a new one will be generated
Deleting Your Key
- Click the "🗑️ Delete Key" button
- A confirmation dialog will appear: "Deleting the API key will revoke access for all external apps. Are you sure?"
- Click "OK" to confirm
- The API key will be permanently deleted
API Key Security
Important Security Notes:
- Keep your API key secret - never share it publicly
- Store it securely - use environment variables or secure password managers
- Regenerate if compromised - if you suspect your key is compromised, regenerate it immediately
- Monitor usage - keep track of which applications use your API key
- Delete unused keys - remove keys that are no longer needed
Best Practices:
- Use environment variables to store your API key
- Never commit API keys to version control
- Use different keys for different applications if possible
- Regularly rotate your API keys
- Monitor API usage for suspicious activity
Troubleshooting
"Upgrade required: Access to the API is only available on Bloom or Thrive plans"
- You need to upgrade your plan to access API features
- Click "Upgrade Now" to go to the billing page
"You are not authorized to create a brand"
- You need Admin or Account Admin role to generate API keys
- Contact your Account Admin to grant you the necessary permissions
API key not working
- Verify the key is correct and complete
- Check if the key has been regenerated or deleted
- Ensure you're using the correct base URL
- Verify your plan includes API access
"Invalid API key" error
- The key may have been regenerated or deleted
- Generate a new API key
- Check for typos in the key
Rate limiting
- API calls are subject to rate limits
- Implement proper retry logic with exponential backoff
- Monitor your usage to stay within limits
Plan Requirements
Seed Plan (Free)
- No API access
- Cannot generate API keys
Sprout Plan
- No API access
- Cannot generate API keys
Bloom Plan
- Full API access
- Can generate API keys
- All API endpoints available
Thrive Plan
- Full API access
- Can generate API keys
- All API endpoints available
- Higher rate limits
Technical Details
Key Format
- 32-character hexadecimal string
- Generated using secure random methods
- Unique per company
Key Storage
- Stored securely in the database
- Encrypted at rest
- Associated with your company account
Key Lifecycle
- Generated on demand
- Can be regenerated at any time
- Deleted when no longer needed
- Automatically invalidated when regenerated
Rate Limits
- Varies by plan
- Implemented to prevent abuse
- Reset periodically
API Versioning
- Current version: v1
- Backward compatibility maintained
- New versions released as needed
Support and Resources
Documentation
- API documentation available at api-docs
- Swagger/OpenAPI specification
- Example requests and responses
Support
- Contact support for API-related issues
- Include your API key (masked) in support requests
- Provide detailed error messages and logs
Community
- Join the RobinReach community for API discussions
- Share integration examples
- Get help from other developers
Updates
- API updates announced in advance
- Breaking changes are rare and well-documented
- Maintain backward compatibility when possible