What can an API key do, and what can't it do?

A key acts as you, only in the workspace where you created it, and never with more rights than you have yourself. Depending on its scopes it can read, edit and publish pages and funnels, read leads, contacts and metrics, read today's Focus 3, and read the financial plan or change it with a preview. Deleting and admin actions are never possible with a key.

1. 01Publishing is a scope of its own and only works if you're allowed to publish yourself.
2. 02“Edit financial plan” never triggers a bank transfer.
3. 03At most 120 requests per minute per key.
4. 04Every change appears in the audit log as “Via MCP” or “Via the API”.
5. 05Guests can't create keys.