Keys and authorization

All API requests are signed with a company key. Keys are created in the dashboard on the Business plan and grant access to all company data — treat them like passwords.

Creating a key

1. 1

   Open Settings → API

   Available to the owner and admins on the Business plan.

2. 2

   Create a key

   Click “New key” and name it — e.g. “Bitrix24” or “backup”. The name helps you remember where the key is used.

3. 3

   Save the key

   The ch_live_... key is shown in full only once. Store it in a secrets manager right away.

How to pass it

Authorization: Bearer ch_live_9f3ka2

Rotation and revocation

• You can have several keys — issue a separate key per integration.
• Revocation is instant: requests with a revoked key get 401.
• Rotate keys every 6–12 months: create a new one, migrate the integration, revoke the old.