Creating & Managing API Keys
Create a key so other tools and AI agents can read your leads or send new ones — and revoke it anytime.
What an API key is for
An API key is a secret password that lets another tool talk to LeadToSheet on your behalf — for example, to read your leads or to add new ones from your own software. Keys belong to a single site, so a key you make for one site only works for that site.
Create a key
- 1
Open the Sources page
Open the site you want the key for, choose Sources in the sidebar, and click the "REST API" tile to open it.
- 2
Click "Create API key"
Give the key a name that tells you where it's used, like "Zapier integration" or "Internal pipeline". That makes it easy to recognise later.
- 3
Choose what it's allowed to do
Tick only the permissions (called scopes) the tool actually needs — see the list below. The fewer it has, the safer.
- 4
Click Create
Your new key appears once, in full. Copy it straight away (more on that below).
Permissions (scopes)
Each key carries one or more permissions. Pick only what's needed:
- Read submissions — let the tool look at your leads and their details.
- Create submissions — let the tool add new leads.
- Read forms — let the tool see your forms and their settings.
- Update forms — let the tool rename a form, change its sheet tab, or ignore it.
Tip
If a tool only needs to look at your leads, give it just the read permissions. Add the "create" or "update" permissions only when it really needs to make changes.
Copy your key right away
Important
You'll only see the full key once, the moment you create it. Copy it and paste it somewhere safe — like a password manager — before closing the window. If you lose it, you can't see it again; just create a new one.
Every key starts with "lts_" so it's easy to spot. In the list afterwards, only the first few characters are shown, never the whole key.
See and revoke your keys
The REST API tile lists every key you've made, along with when each one was last used (or "Never used"). This helps you spot a key you no longer need.
- 1
Find the key
In the list of keys, find the one you want to switch off.
- 2
Click the trash icon and confirm
This revokes the key straight away. Any tool still using it will stop working immediately, so only do this for keys you're sure about.
Note
Revoked keys move into a "Show revoked keys" list so you keep a record. Revoking can't be undone — if you need access again, just create a fresh key.
Where to use your key
- With the REST API — send the key as a bearer token to read or add leads from your own software.
- With AI agents — the same key works for connecting an AI agent through MCP.