Create and use API keys

API keys let you drive DeDupe programmatically — trigger scans, read duplicates, and execute merges from your own code. Manage them under Settings → Account → API Keys.

Create a key

1. Click Create New Key.
2. Give it a Name (and an optional description of what it's for).
3. Choose Scopes — read, write, and/or delete. Grant only what the integration needs.
4. Optionally set an Expiration — Never, 30 days, 90 days, 180 days, or 1 year.
5. Click create.

Copy the key immediately. DeDupe shows the full key only once, right after you create it. Store it somewhere secure — you can't retrieve it later.

Each key in the list shows its scopes, when it was last used, and its expiry. You can Delete a key at any time to revoke it.

Using a key

Send the key on each request using either header:

# Recommended
Authorization: Bearer attio_pk_your_api_key_here

# Or
X-API-Key: attio_pk_your_api_key_here

What you can call

The public API covers the core actions:

• POST /api/v1/scans — trigger a duplicate scan
• GET /api/v1/duplicates — list detected duplicate pairs
• POST /api/v1/merges — execute a merge

For full endpoint details, request/response schemas, and an interactive explorer, see the API reference.