Get or Regenerate Your API Key

Your API key authenticates every programmatic request to MultiCartAPI. Pass it as the x-api-key header on all API calls. This guide shows you how to view your key in the dashboard and how to rotate it when you need a fresh one.

In the dashboard

1. Click your avatar or name in the top-right corner and open Profile.
2. Locate the About you card — your API key appears here as a masked value (173axcs.••••••••••••••••). The part before the dot is the public key prefix; the secret after it stays hidden until you reveal it.
3. Click the eye icon to reveal the full key.

4. Click Copy to copy the revealed key to your clipboard.

Rotate your API key

If your key has been exposed or you want to cycle it as a security practice, you can regenerate it at any time.

1. On the Profile page, find the About you card and click Regenerate.
2. A confirmation modal appears — read it carefully before proceeding.
3. Click Confirm (or the equivalent confirm button) to issue a new key.

After confirming, the masked field refreshes. Reveal the new key with the eye icon and copy it.

Via the API

You can both read your current key and rotate it programmatically. This is useful for automated key rotation workflows or for bootstrapping a new environment that only has a session token.

Read your API key

Send an empty body. The response includes the api_key field.

curl https://multicartapi.com/api/v1/users/account-details \
  -X POST \
  -H "x-api-key: YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{}'

{
"code": 200,
"data": {
  "id": 7,
  "user": 42,
  "api_key": "173axcs.xYz...",
  "system_emails": false,
  "update_emails": false,
  "notification_emails": false,
  "timezone": "Australia/Brisbane",
  "created_at": "2025-01-15T09:00:00Z",
  "updated_at": "2026-06-01T12:00:00Z"
},
"status": 1
}

Rotate your API key

No request body is required. On success the old key is invalidated immediately. Call POST /users/account-details afterward to retrieve the new key value.

# Step 1 — rotate
curl https://multicartapi.com/api/v1/users/api-key/update/ \
  -X POST \
  -H "x-api-key: YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{}'

# Step 2 — retrieve the new key
curl https://multicartapi.com/api/v1/users/account-details \
  -X POST \
  -H "x-api-key: NEW_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{}'

{
"code": 200,
"data": "API Key Updated successfully!",
"status": 1
}