API keys let you securely connect your workspace to outside tools — Zapier, sourcing tools, reporting dashboards, and custom integrations. Every key can be given exactly the access it needs, so you never have to hand over more than necessary.

API keys list on Email & other integrations → API access & Webhooks
Only organization admins can create, roll, or revoke API keys. If you don't see these options, ask an admin in your workspace.
Go to Settings → Email & other integrations → API access & Webhooks: stardex.com/settings?tab=email-calendar§ion=api-access
Webhooks for outbound events are on this same page, below the keys. See the Webhooks guide.
| Level | What it can do | Best for |
|---|---|---|
| Read only | Read data across your workspace, but can't change anything. | Reporting, dashboards, and syncing data out. |
| Integration | Read and write People, Candidates, and Jobs, and write notes and activities. No access to documents, note history, compensation, deals, or meetings. | Zapier and sourcing tools. |
| Custom | Exactly the permissions you choose. | Fine-grained control. |
| Admin | Full access to everything, including sensitive data. | Only when nothing narrower works. You'll be asked to type ADMIN to confirm. |
When you pick Custom, you'll see a grid of resources with Read, Write, and Delete columns. Tick only what the integration actually needs.