Skip to content
Notificator Docs

Create an API Key

Where to create keys

Section titled “Where to create keys”

In the web dashboard (beta):

  • Create an account or sign in with your existing Notificator account.
  • Open API keys in the sidebar.
  • Select Create API key.

Or, in the mobile app:

  • Open Account.
  • Find the API Keys section.
  • Tap Create API Key.

Key creation flow

Section titled “Key creation flow”
  1. Enter a descriptive name (for example: wordpress-prod, staging, automation).
  2. Select key type:
    • WordPress -> wordpress_server
    • Strapi Extension -> strapi_server
    • Public API -> public_client for Astro, the Node.js SDK, and custom server integrations
    • Internal -> internal_service where offered by the mobile app; the web dashboard offers the three integration types above
  3. Create the key.
  4. Copy it immediately and store it in your password manager.

In the API Keys list, each key now shows:

  • Type
  • Last used timestamp
  • Allowed domains count

The dashboard also lets you filter active and revoked keys, edit an active key’s name and allowed domains, explicitly reveal or copy an active key, and revoke it. Revoked keys can be permanently removed. Changes apply to the same keys used by your mobile app and integrations.

Key format:

wpnotif_<random-value>

Important notes

Section titled “Important notes”
  • Treat keys as secrets.
  • Use separate keys per environment/system.
  • Use the correct key type per endpoint.
  • Revoke compromised keys immediately.
  • A key is needed for the Notificator inbox, mobile push, email, MQTT, connected devices, or direct API use—not for WordPress dashboard alerts or the local Strapi activity feed.

Endpoint compatibility by key type

Section titled “Endpoint compatibility by key type”
  • wordpress_server: use with the WordPress plugin signed server flow
  • strapi_server: use with the Strapi extension signed server flow
  • public_client: use with public-notify (external/public integrations)
  • internal_service: allowed on both endpoints

Use key in requests

Section titled “Use key in requests”

Recommended header:

Authorization: Bearer wpnotif_...

Also supported:

  • X-API-Key: wpnotif_...
  • X-WPNOTIF-Key: wpnotif_...

Next step

Section titled “Next step”