Skip to main content

API Credentials & Access

Wonderkind NEXT provides an API for programmatic access to your account data. You can use the API to integrate with your ATS, build custom reporting pipelines, or automate job syncing.

Generating an API key

API keys are scoped to an Account. Only Account Admins can generate them.

  1. Go to Account Settings → API Credentials.

  2. Click Generate API key.

  3. Give the key a descriptive name (e.g., "ATS Integration", "Reporting Pipeline").

  4. Click Generate.

  5. Copy the key immediately it is displayed only once and cannot be retrieved later.

Store the key in a secrets manager or environment variable. Never commit it to source control.

Using API keys

Include the API key in the Authorization header of every request:

Authorization: Bearer YOUR_API_KEY

API documentation is available at your Wonderkind instance's developer portal. Contact your Wonderkind administrator for the API base URL.

Key management

The API Credentials tab shows all keys for the Account:

  • Key name

  • Creation date

  • Last used date

  • Status (Active / Revoked)

Revoking a key

  1. Find the key in the list.

  2. Click ⋯ → Revoke key.

  3. Confirm.

Revoked keys cannot be restored. If you need access again, generate a new key.

Key rotation best practice

Rotate API keys every 90 days or immediately after a suspected exposure. To rotate:

  1. Generate a new key.

  2. Update your integration to use the new key.

  3. Revoke the old key once the new key is confirmed working.

Scopes and permissions

API keys inherit the permissions of the Account they belong to. There is currently no per-key scope restriction, a key can access all resources in its Account that an Account Admin can access.

Feature flags

Some features in Wonderkind NEXT are controlled by feature flags managed by your Wonderkind administrator. Feature flags allow gradual rollout of new capabilities. If you expect a feature to be available and it isn't visible, it may be behind a flag.

Contact your Wonderkind administrator to:

  • Enable or disable features for your organization

  • Request access to beta features

  • Configure platform-specific flags (e.g., Lead Form support, Iventa distribution)

Related articles

  • Managing Accounts

  • User Roles & Permissions

Did this answer your question?