Learn how to secure your API by using API keys in the header for authentication and authorization purposes effectively.Jul 30, 2025Article
InformationTitleAPI Key HeaderContentContentMVP Ones OData API and Public API allow for authentication via an API Key Header. The API Key is used in place of a username and password. It provides both Identity and Authentication in a single value. This feature is available on both local MVP One sites and MVP One Enterprise sites. This feature is available for all MVP One customers whose licensing allows for at least one Public API endpoint. To create an API key from a single MVP One site (not Enterprise), use the following steps to update your role: Select Administration.Select Roles.Select the role you wish to grant access to API Key creation.Select Edit.Check the box at the top of the role that says “Create API Key." Please note that this checkbox is only available for Maintenance and Contractor roles.Select Save.Log out and back into MVP to complete the process. For users that have the Create API Key permission on MVP One sites, or Enterprise Admins, use the following steps to create a new API Key Click on your User Icon. Click on “My API Key”.Click on “Create”Highlight the generated API Key Right-click on the highlighted TextCopyWe suggest storing this key in a secure text document, as it cannot be retrieved again once you press “OK”.If you have already generated an API Key, Instead of a generate button, a "Delete API Key" button will show instead. When setting up the API Key for Authentication please use the following configuration, The Auth type will need to be set to “API Key”.The “Key” value should be set to API_KEYPaste your copied MVP One API Key into the Value field.the Add to value should be set to header. Here is an example of how this would be set up in Postman Please note that PowerBI will now allow the MVP One API Key authentication to refresh data into PowerBi. URL NameAPI-Key-Header