Authentication
Learn how to authenticate with the Fibek API using an API Key.
Fibek uses a per-company API Key to authenticate API calls. The API Key is sent in the
X-API-KEY header. By default it never expires — you can optionally give it an expiry date when you create it — and you disable it by revoking it.
Generating an API Key
You can create your API Key directly from the Fibek platform. You need to be a team administrator for your company:
- Log in to your Fibek account
- Navigate to My Company → Integrations
- Open the API Integration tab
- In the API Keys panel, click Create API Key and give it a name
- Copy and securely store the generated API Key
Important: the API Key is shown only once. It cannot be recovered afterwards; if you lose it, create a new one.
Use the key from this tab. API Keys created in the Siigo Pyme tab work for that flow only: with them, the CSV upload endpoints respond
403.
API Key Information
When you create it you will receive:
| Field | Type | Description |
|---|---|---|
id | Number | The API Key identifier, used to list or revoke it |
name | String | The name you gave it |
key | String | The API Key (starts with fbk_live_). Shown only at this moment |
keyPrefix | String | The first characters of the key, so you can recognise it in the list |
createdAt | Date | Creation date |
The list in the API Integration tab shows the prefix, the status (active, expired or revoked) and the last-used date — never the full key.
Using the API Key
Include the API Key in the X-API-KEY header on every request:
X-API-KEY: <YOUR_API_KEY>Example:
curl -X POST "https://backend.fibek.co/full-csv-integration/upload-customers" \
-H "X-API-KEY: <YOUR_API_KEY>" \
-F "customersFile=@customers.csv"Revocation
To disable an API Key, use Revoke in the API Integration tab. Any integration using it stops
working immediately and calls with that key respond 401. To rotate it, create a new one and revoke
the previous one once it is no longer in use.