API keys
An API key is how a bot identifies itself to Zulip. Anyone with a
bot's API key can impersonate the bot, so be careful with it!
Get a bot's API key
- 
Go to Your bots. 
- 
Click Active bots. 
- 
Find your bot. The bot's API key is under API KEY. 
Get your API key
Anyone with your API key can impersonate you, so be doubly careful with it.
- 
Go to Your account. 
- 
Under API key, click Show/change your API key. 
- 
Enter your password, and click Get API key. If you never had a
   password, click Never had one? Forgotten it? and follow the
   instructions from there. 
- 
Copy your API key. 
Invalidate an API key
To invalidate a key, follow the instructions above, and click
Generate new API key or click the refresh
() icon as appropriate.
This will generate a new key for you or the bot, and invalidate the old one.