# Get credentials

<!-- WARNING: THIS FILE WAS AUTOGENERATED! DO NOT EDIT! -->

> **New**
>
> Use **[Platform Studio](https://platform.zoom.us/)** to discover, purchase, build with, and manage Build Platform products. Create projects, get credentials, start a free trial, purchase a plan, and monitor usage.

Create your API Key to access Build platform APIs and webhooks.

## Usage guidance

-   **API Key** — Use for server-to-server (S2S) calls. Key stays on your backend.
-   **JWT** — Use when a client app, such as a browser, mobile device, or desktop PC calls Zoom directly. JWT is short-lived and doesn't expose your secret. If you are making API calls from a client to Zoom (not S2S), use JWT so your key is not compromised in an attack.

**Never embed raw API keys or secrets in client-side code.**

## Create API Key

1. In **Platform Studio**, click **Credentials**.
2. Click **Create** next to **API Keys**.
3. Enter a **Name**. This is optional and internal only. If you don't chose a name, Platform Studio uses a default.
4. **Expires after**. Choose an expiration option: Never, 30 days, 90 days, 180 days, 1 year.
5. **IP allowlist**. Enter any IP addresses that you want to allow, or empty to allow all.
6. **Permissions**. Choose scopes for APIs. These depend on your product. You can choose multiple permissions for multiple products for one key, or limit permissions as needed.
7. Click **Create key**.
8. API key created. You'll see a modal dialog with the key and the instructions: _This is your new API key. Make sure to copy it before closing this dialog. For security reasons, it will not be shown again._ Copy your key and put it in a key manager.
9. Click **Close**. You'll get a confirmation dialog to confirm that you copied your key before the modal closes: _Have you saved your key? It cannot be shown again once this dialog closes._ You will not be able to access your key again. Click **Close anyway** or **Go back**.

### Table of API keys

Click an action to manage your key:

-   **Edit** - Change the name and permissions. You can't change the expiration time.
-   **Disable**/**re-enable** - Choose to disable or re-enable a key.
-   **Revoke your key** - Choose to revoke your key. Applications using this key will immediately lose access. This action cannot be undone. This also removes the key from the table.

### Review credential details

Click a key name to review the details about it.

-   **Name** - The key name.
-   **ID** - The ID, for internal support.
-   **User ID** - The ID of the user who created the key.
-   **Permissions** - The permissions the key has.
-   **Status** - The key status, Active or disabled.
-   **Expires** - The expiration date and time, or "Never".
-   **Created** - The date and time the key was created.
-   **Updated** - The date and time the key was updated.

## Create JWT

The JWT is created from your account API key and secret. To generate your JWT, click **View JWT Token**.

### Expiration time

-   Expire in - Choose the time for the key to expire. 90 minutes, 1 day, or 1 week.
-   Expiration time - The expiration time for your JWT. For example: _Your token will expire at HH:MM MM/DDYYYY._

### Copy JWT

Copy your JWT from the **JWT Token** field.

## Make API requests

See [Make API requests](/docs/build/api-request/) for details.