Skip to main content
Scopes restrict what an API key can do. If a key has no scopes, it is treated as having default send permissions for backward compatibility. Available scopes
ScopeRequired forNotes
send_emailPOST /api/v1/emails/*Includes send and send-global
read_sendsGET /api/v1/sends/{id}Timeline access when using a key
preferences_readGET /api/v1/preferencesWhen using an API key
preferences_managePOST /api/v1/preferencesWhen using an API key
Best practices
  • Create separate keys per service with the minimum scopes
  • Rotate keys periodically and on exposure
  • Apply rate limits per key where appropriate