> ## Documentation Index
> Fetch the complete documentation index at: https://docs.momentco.io/llms.txt
> Use this file to discover all available pages before exploring further.

# API Keys

> View and copy your API keys and business unit IDs in the Client Portal

The **API keys** section in Client Portal Settings lists your organisation's active API keys and the business units each key is linked to. The section is view only: to request a new key or revoke one, contact [Customer success](https://docs.momentco.io/documentation/support.md). For how keys work with the API, including test and live mode, see [Authentication](https://docs.momentco.io/api-reference/getting-started/authentication.md).

* The section is visible to users whose role includes access to API keys. If it's missing from Settings, ask an admin on your account to check your role.
* Only active keys are listed. Revoked and expired keys don't appear.

The steps below follow a user finding a key and copying it into their integration.

## Step 1: Open your API keys

Select **Settings** in the sidebar and scroll to **API keys**. On wide screens, you can also jump there from the **On this page** list on the right.

Settings has no Live/Test toggle. Test and live keys are listed together, whichever mode you're in.

![API keys section in Client Portal Settings](https://mintcdn.com/momentholdingslimited/CQxmGGpNFOzBJTT2/guides/resources/api-keys-settings.png?fit=max\&auto=format\&n=CQxmGGpNFOzBJTT2\&q=85\&s=41ff1af53ca7dd670c57aee00950e40b)

## Step 2: Filter by business unit

The list starts filtered to the business unit selected in the header. To see keys for other business units:

* Type in **Search for business unit** and select one or more business units. Each selection appears as a chip under the field.
* Remove a chip to drop that business unit from the filter, or select **Clear all** to remove every chip.

With no business units selected, the table lists every active key across all the business units you have access to.

![Business unit filter with the list of business units open](https://mintcdn.com/momentholdingslimited/CQxmGGpNFOzBJTT2/guides/resources/api-keys-business-unit-filter.png?fit=max\&auto=format\&n=CQxmGGpNFOzBJTT2\&q=85\&s=30345c40da3809eab2628ac1cb9c3a94)

## Step 3: Open a key and copy it

Each row in the table shows one key:

| Column | What it shows |
| - | - |
| **Name** | The name the key was issued with. |
| **Mode** | **Live** or **Test**. |
| **Type** | **Public** or **Secret**. |
| **Business units** | The business units the key is linked to. |

Select a row to open the key's details. The panel shows:

* The key's **mode**. Test keys simulate requests and move no real money. Live keys move real money.
* The key's **type**. Public keys can be used in client-side code. Secret keys are for server-side code only.
* The key itself is shown as masked. Select the eye icon to show or hide it, and the copy icon to copy the full key.
* The **Business units** the key is linked to, each with an ID you can copy. Requests made with a key linked to more than one business unit must include this ID in the `Moment-Business-Unit` header. See [Business units](https://docs.momentco.io/api-reference/getting-started/authentication.md#business-units).

![API key details panel](https://mintcdn.com/momentholdingslimited/CQxmGGpNFOzBJTT2/guides/resources/api-keys-details.png?fit=max\&auto=format\&n=CQxmGGpNFOzBJTT2\&q=85\&s=88c37ca6fd1c2dc94195ed86ece9fbd1)

> [!WARNING]
>
> Anyone holding a secret key has full API access to your account, and with a live secret key can move money. Keep secret keys on your server, and out of client-side code, mobile apps, and version control.

***

## Live keys and business verification

A live key can only be opened once the legal entity behind its business unit is verified. Until then, the key's row shows a lock icon next to its mode. Hover over the mode badge to see the reason:

| Reason | What it means | What to do |
| - | - | - |
| Verification in progress | Moment is verifying your business. | No action is needed. The key becomes available once verification is complete. |
| Not verified | Your business hasn't completed verification. | Complete business verification to start accepting live payments. Contact [Customer success](https://docs.momentco.io/documentation/support.md) if you're unsure what's outstanding. |
| No legal entity linked | The business unit isn't linked to a legal entity. | Contact [Customer success](https://docs.momentco.io/documentation/support.md) to link the business unit to a legal entity. |

Test keys are never locked, so you can build and test your integration while verification is in progress.

## Good to know

* Switching organisation or business unit in the header reloads the list, resets the business unit filter to the new selection, and closes any open key.
* Keys are masked again each time you open the details panel.
* Access to API keys is set per organisation. If you belong to more than one organisation, you may see the section in one and not another.
* Key names are set when Moment issues a key and can't be changed in the Client Portal.

## Next steps

👉 [Authentication](https://docs.momentco.io/api-reference/getting-started/authentication.md)

👉 [Organisation structure](https://docs.momentco.io/guides/company-structure.md)

👉 [Integration testing](https://docs.momentco.io/api-reference/getting-started/testing.md)


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.