Planelo API Keys
API keys let your favorite tools—scripts, AI agents, and automations—interact with your Planelo data securely. Treat them like your master password.
Security first. We never store your plaintext API keys. Only a secure one-way hash exists on our servers. If you lose a key, you'll need to generate a new one.
How it works
One-time view
Keys are shown only once at creation. Copy and store them in a secure vault immediately.
Total Control
Revoke any key instantly from your settings if you suspect it has been compromised.
Project Scaling
We recommend using Project-scoped keys whenever possible. If an automation only needs to work with one project, don't give it access to your entire workspace. This reduces the "blast radius" in case of a leak.
Dev Best Practices
- Give keys meaningful names (e.g., "iPhone Shortcut", "GPT Agent").
- Never commit keys to version control (use .env files).
- Use separate keys for different environments.
- Audit and rotate your keys every 90 days.
Technical Usage
Pass your API key in the X-API-Key
header to authenticate.
-H "X-API-Key: YOUR_API_KEY_HERE" \
-H "Content-Type: application/json" \
-d '{
"title": "Build a CLI for Planelo",
"projectId": "6b467071-289b-476f..."
}'