API keys
Create and manage keys for the API, SDK and MCP.
API keys
Any user can create API keys — in the app under Settings → API keys. (There is no separate developer role; every user manages their own keys.)
A key:
- is shown in full exactly once, at creation — copy it then; only its prefix and last-used time are kept after,
- authenticates requests as you, scoped to your team, via
Authorization: Bearer lp_live_…, - can be revoked any time (takes effect immediately).
Keep keys secret
A key acts as you. Use it from a server, never ship a lp_live_ key to an untrusted browser or app. Revoke and
rotate a key you think is exposed.
Use it
export LOANPILOT_API_KEY="lp_live_..."
curl https://api.ippo.one/v1/me -H "Authorization: Bearer $LOANPILOT_API_KEY"The same key works for the REST API, the SDK and the MCP server.