API keys
If you want to work with your Lasso data from your own code, you do it through the Lasso REST API, and an API key is how your code authenticates. Create a key, give it the right access, and use it to read and manage partners, referrals, invoices, and more.
How keys work
Each key belongs to your account and carries a role, so you control exactly what a key can do, the same way you control what a team member can do. A reporting integration might get read access only; a tool that creates referrals gets more. You can have multiple keys for multiple integrations, each scoped appropriately.
Built with security in mind
A key’s full token is shown to you once, when you create it, so you can store it securely in your own system. If a key is ever lost or you want to refresh it, you can rotate it: the old token stops working immediately and a new one takes its place, with no need to rebuild the integration from scratch.
Where to go next
The full REST API, what it covers and how to call it, lives in the API reference. The guide below covers creating and managing the keys you’ll use to call it.
See the full guide
The complete walkthrough, covering creating a key, choosing its access, storing the token safely, and rotating a key, lives in your Lasso account.