Each API key must be included in the
x-api-key HTTP header of every request made to the API.
API keys are sensitive. Do not expose them in client-side code, browser-based
applications, or public repositories.
Getting your API key
To create an API key for use in your application:- Visit https://app.mitu.ai
- Go to Developer → API Keys
- Click New API Key
- Enter a descriptive label for your key (e.g.
CRM Integration,Loan Payment Reminder) - Click Submit
- Copy the key immediately, as it will not be shown again
Making authenticated requests
To make requests to the API, include your API key in thex-api-key header of every API call.
Here’s a basic example using curl:
Revoking & rotating API keys
You can revoke a key at any time from your dashboard:- Navigate to Developer → API Keys
- Click Revoke next to the key
- Once revoked, any requests using that key will immediately return
403 Forbidden
Best practices
- Use a different key for each environment (development, staging, production)
- Store your keys securely using environment variables or secret managers
- Monitor usage and revoke unused keys
- Do not embed API keys in frontend code or public repositories
You’re now ready to start integrating with the Mitu API securely.