API security best practices

Last updated: December 1, 2024

API Security

Keep your integrations secure.

Never commit keys to version control

Use environment variables

Rotate keys regularly

Use minimum required permissions

Create keys with only needed scopes:

`documents:read`

`documents:write`

`templates:read`

`ai:generate`

Restrict API access by IP:

Go to **API Keys**

Click **Configure** on a key

Add allowed IP addresses

Save changes

View API usage in dashboard

Set up alerts for unusual activity

Review access logs regularly

Was this article helpful?

CreateDocs.ai — AI Writes Your Legal Documents Instantly