Every request to the DirectIQ API must include your API key in the X-API-Key header.
curl https://api.directiq.com/v2/webhooks \
-H "X-API-Key: YOUR_API_KEY"Get your API key
- Sign in to DirectIQ.
- Go to Integrations → API Keys.
- Copy the X-API-KEY value.
The key belongs to your account, and every request made with it acts on that account's data.
Keep your key secret
Anyone who has your API key can read and change your account's data.
- Call the API only from your server. Never put the key in browser code, mobile apps or public repositories.
- Store it in an environment variable or a secrets manager, not in your source code.
- Send requests over HTTPS only.
Replace a key
If your key may have leaked, generate a new one on Integrations → API Keys. The old key stops working right away, so update your integrations with the new key.
Errors
A request with a missing or invalid API key is rejected with 401 Unauthorized. Check that the header is named X-API-Key and that the key is the current one shown in DirectIQ.