Skip to main content
The Qonversion API uses Bearer token authentication. There are two types of keys:

Project Key

Used for standard API requests — retrieving users, properties, identities, entitlements, and creating purchases. Find your Project Key in Project settings in the Qonversion dashboard.
All examples in this documentation use the Qonversion sample app Project Key (test_PV77YHL7qnGvsdmpTs7gimsxUvY-Znl2) for testing.

Secret Key

Used for advanced operations that modify user access — granting and revoking entitlements.
  • Prefixed with sk_
  • Found in Project settings in the Qonversion dashboard
The Secret API key should only be stored on your server. Never use your secret key in Android, iOS, or web apps.

Which key to use?