How to rotate your keys and use the Metixon public API

Access keys and the public API, step by step

Hi. Here are your project's two keys, how to rotate them if they leak, and how to read your data with the public API.

1. 1The browser's public key and the server's secret key

   In Settings, see the Access keys card. The public key goes in your site's snippet: it lives in the browser and only sends events.

   The secret key is for your server and never goes in browser code. For safety, you only see its start here.

2. 2Rotate a key: the old one stops working

   If you think it leaked, click Rotate. Metixon creates a new key, and the old one stops working at once.

   The new key is shown in full only once. Copy it now and save it in your server's environment variables.

   You can rotate the public key too. Just put the new one in your site's snippet, or you'll stop getting visits.

3. 3Query the Public API with your secret key

   Below is the public API: it reads your analytics from your server with the secret key, never the public one.

   Try it in a terminal. Paste the example, swap in your secret key, and pick the dates you want.

   You get JSON with the same metrics as your Overview: visitors, sessions, conversions, and revenue for the period.

The public key goes on your site, the secret key stays on your server, and if one leaks, rotate it in one click.

Frequently asked questions