Skip to main content

Frequently Asked Questions

Can I generate multiple client secret keys?

Yes. You can generate multiple API Key–Secret pairs for your application, subject to the following conditions: 
• A maximum of 3 active API keys is allowed per application. 
• Each API key is valid for 13 months. 
• When a new API key is generated, the existing key remains active for 60 days before being automatically revoked. 
• The Add Key option is available only when all eligibility requirements are met. 

How long is my API key valid?

Your API key is valid for 13 months from the date it is generated.

Can I align my API key expiry with my SSL certificate expiry?

Yes. During API key generation, you can choose to align the API key expiry date with your SSL certificate expiry date. 

Can I generate an API key if my SSL certificate is about to expire?

No. API key generation is allowed only if your SSL certificate has more than one month of remaining validity.

What happens when I generate a new API key?

• A new API Key–Secret pair is created. 
• The new key is valid for 13 months. 

Why can't I see the 'Add Key' option?

The Add Key option is displayed only when: 
• All subscribed API products are approved. 
• Your SSL certificate is approved. 
• Your application has fewer than 3 active API keys. 
If any of these conditions are not met, the Add Key option will not be available.

Will I receive reminders before my API key expires?

Yes. You will receive weekly reminder notifications starting 60 days before your API key expires.

Can I extend the validity of my existing API key?

No. Existing API keys cannot be extended. You must generate a new API key when your current key is nearing expiry.

Is there a limit to the number of active API keys I can have?

Yes. You can have a maximum of 3 active API keys for a single application at any given time.

When should I generate a new API key?

You should generate a new API key before your current key expires to avoid any disruption to API transactions. Reminder notifications will be sent starting 60 days before expiry.

What happens if my API key expires?

Once your API key expires, API requests using that key will no longer be authenticated. You must generate and use a valid API key to continue accessing APIs.

Can I continue using my old API key after generating a new one?

Yes. Your old API key remains active for 60 days after a new key is generated, allowing sufficient time to update your applications and systems.

Do I need to update my application after generating a new API key?

Yes. You should update your application configuration with the newly generated API key and secret before the 60-day transition period ends.

Can I generate a new API key without changing my application details?

Yes. If your application meets all eligibility criteria, you can generate a new API key without modifying other application configurations.

What should I do if I have already reached the maximum limit of 3 active API keys?

Each application can have a maximum of 3 active API keys at any given time. 

If you have already reached this limit and need to generate a new API key, you must first revoke or delete one of the existing active API keys. Once the number of active API keys falls below the maximum limit, the Add Key option will become available, provided all other eligibility requirements are met. 

Note: It is recommended to ensure that the API key being revoked or deleted is no longer in use before proceeding with the action.

What happens when an API key reaches its expiry date?

When an API key reaches its expiry date, it is automatically marked as Revoked and can no longer be used for API transactions. 

Any API requests made using the expired key will fail authentication. To avoid service disruption, you should generate a new API key and update your applications before the existing key expires. 

Note: The system sends weekly reminder notifications starting 60 days before the API key expiry date to help you plan and complete the key rotation process in advance. 

What happens when I update my application with Never expiry API Key?

When you update certain application attributes (such as SSL certificate, IP whitelist, product subscription, or scope), the system will ask whether you would like to generate a new API key. 

  • If you select "Yes":
  • A new API Key–Secret pair is generated.
  • The new key is valid for 13 months.
  • Your existing API key remains active for 60 days to allow a smooth transition.
  • The old key is automatically revoked after the 60-day transition period.
  • If you select "No":
  • You will be redirected to create a new application.
  • All application details and configurations must be entered again.
  • A new API Key–Secret pair will be generated for the newly created application. 

This ensures uninterrupted access while allowing you to choose the most suitable key rotation approach for your application.