> ## Documentation Index
> Fetch the complete documentation index at: https://docs.sarafa.ss/llms.txt
> Use this file to discover all available pages before exploring further.

# API keys

> Manage merchant API keys from the dashboard.

Use **Settings > API keys** to manage API access for your merchant account.

<img src="https://mintcdn.com/sarafaplatform/GUkd0WMKrgiIFhx8/images/product-guide/api-keys.svg?fit=max&auto=format&n=GUkd0WMKrgiIFhx8&q=85&s=9fea4a2710a0202b12285234808afd6e" alt="API keys" width="1200" height="760" data-path="images/product-guide/api-keys.svg" />

## Use sandbox first

Start with sandbox keys while you build and test your integration. Move to production only after your team has tested collections, transfers, callbacks, and reconciliation.

## Copy a key

1. Open **Settings**.
2. Select **API keys**.
3. Confirm the current environment.
4. Copy the key you need.
5. Store secret keys only on your server.

## Rotate a key

Rotate a key if it may have been exposed or when your security process requires it. Update your integration before disabling an old key.

## Key safety

* Do not share secret keys in chat, email, screenshots, or client-side code.
* Use separate keys for sandbox and production.
* Remove unused keys.