Skip to content
Purity

Create and manage API keys

Publishable keys are safe in browser code; secret keys can create orders and must stay on your server.

Owners and admins create and revoke keys; staff can see the list · Updated September 24, 2026

The Your website screen in Purity, with example data
The Your website screen, with example data.

Open API Keys to create a key for your website or another system to talk to Purity.

  1. Give the key a name, like "Storefront."
  2. Choose the type: "Publishable (pk_)" for catalog reads, safe in browser code, or "Secret (sk_)" for checkout writes, kept on your server only.
  3. Click "Create key" and copy it right away. It is not shown again.
  4. Click "Revoke" next to a key you no longer use to turn it off.

A revoked key stops working immediately and can't be turned back on; create a new one instead.