API Keys & Webhooks
Create API keys and outgoing webhooks so other systems (your website, a lead source, Zapier-style tools, or your own code) can read and update HiringCenter data, and hear about changes as they happen.
Path: Settings → API / Webhooks
Only Admins and Owners see this tab.
For request formats, authentication, and event payloads, see the API Overview, API Quickstart, API Reference, and Webhooks on this docs site.
Create an API key
- Open Settings → API / Webhooks.
- Under API Keys, click Add API Key.
- Enter a Key Name (for example "Production API Key") and an optional Description of what it is used for.
- Choose the key's Access:
- Read & write (the default): the integration can look things up and create, update, or delete them.
- Read only: the integration can look things up, but every change is refused.
- Click Create Key.
- Copy the key now. The IMPORTANT: Save Your API Key box is your only chance to see it. Click Copy to Clipboard and store it in a password manager or secure vault.
- Close the window.
Every key works only for the account it was created in: prospects, notes, tasks, meetings, hires, and account lookups, as far as its access allows. A request that names a different account is refused. Never share a key publicly, put it in a website's front-end code, or commit it to source control.
An API key can't create or manage other API keys. Through the API it can only view, rename, rotate, or delete itself. Creating keys, changing a key's access, and reactivating keys happen only on this tab.
Manage keys
The API Keys table shows each key's Name with its access under it (Read & write or Read only), Description, Created, and Last Used dates, and an Active or Inactive badge.
- Edit: click a key's row to change its name, description, or access, then Save Changes. The change takes effect on the key's next request.
- Rotate API Key Secret: creates a new secret for the same key and invalidates the old one immediately. Update every system that uses it right away.
- Mark API Key Inactive: the key stops working immediately. It can be reactivated for 30 days, then it is deleted permanently. The row shows how many days are left.
- Reactivate API Key: turns an inactive key back on within those 30 days.
Replace a key safely
- Create a new key.
- Update every integration to use it.
- Mark the old key inactive. If something breaks, reactivate it while you fix the integration.
Outgoing webhooks
Webhooks send signed event notifications to a URL you choose as soon as something changes in HiringCenter.
- Under Webhooks, click Add Webhook.
- Enter the Webhook URL (for example
https://example.com/webhooks). - Choose the Events to send: Prospect Created, Prospect Updated, Task Created, Task Updated, Task Completed, Task Deleted.
- Add an optional Description and save.
- Copy the signing secret shown in Save Webhook Secret and use it on your server to verify signatures. See Webhooks.
Manage webhooks
The Webhooks table shows each webhook's URL, Description, Events, Created, Last Used (hover the status to see the status code and response preview), and 7-Day Error Rate.
- Reveal / hide the signing secret on the row when you need it again.
- Test sends a sample event and shows the headers, payload, and your endpoint's response.
- Rotate webhook secret creates a new secret. For the next 24 hours, deliveries are signed with both the old and new secrets so you can switch over safely.
- Disable webhook / Enable webhook pauses or resumes deliveries.
- Delete webhook removes it.
- Click a row to edit its URL, events, or description.
Treat the signing secret like an API key.
Keys created by AI tools
When anyone in the account (except View Only users) connects Claude, ChatGPT, or another AI tool, HiringCenter adds a key named after them and the tool, for example Jamie Lee (Claude), with an MCP label. The key is scoped to that person, so the AI tool acts as them with their permissions. Mark it inactive to disconnect the tool. Rotate is turned off for these keys; the person reconnects from the AI tool instead. A key also stops working on its own if its person is removed from the account or changed to View Only.
What is not here
- Billing is profile menu → Billing.
- Connections HiringCenter makes to its own providers (phone, email, and similar) are set up by HiringCenter, not on this tab.