Help Center/Getting Started

Creating your first API key

3 min read Updated January 15, 2026

Prerequisites

Before you can create an API key, you need a ComplianceGrid account. Sign up at compliancegrid.ai/register — no credit card required for sandbox access.

Step 1: Navigate to the Dashboard

After logging in, click Dashboard in the top navigation bar. You'll see your organization overview, including current usage stats and active API keys.

Step 2: Generate a New Key

Click Create API Key in the API Keys section. You'll be prompted to:

  • Name your key — Use a descriptive name like production-backend or staging-screening-service
  • Select permissions — Choose which API verticals this key can access
  • Set rate limits — Optionally override the default rate limits for this key
  • Choose environment — Sandbox (free, rate-limited) or Production (metered)

Step 3: Copy and Store Securely

Your API key will be displayed once. Copy it immediately and store it in your secrets manager (e.g., AWS Secrets Manager, HashiCorp Vault, or your CI/CD environment variables). ComplianceGrid API keys follow the format:

cg_sk_<64-character-hex-string>

Step 4: Make Your First Call

Test your key with a simple cURL request:

bash
curl -H "Authorization: Bearer $CG_TOKEN" \
  https://sandbox.api.compliancegrid.ai/v1/hs/search?q=laptop

A successful response returns HTTP 200 with a JSON body. If you receive a 401, double-check your key and ensure it hasn't been revoked.

Key Management Best Practices

  • Rotate keys every 90 days — Use the key rotation endpoint to create a new key before revoking the old one
  • Use scoped permissions — Don't give a key access to verticals it doesn't need
  • Never commit keys to source control — Use environment variables or a secrets manager
  • Monitor usage — Set up alerts for unusual API call patterns in your dashboard

Was this article helpful?