# Create a key

> Settings › API & MCP › New key — use, creators, permissions, expiry; the fc_sk_ key is shown only once.

URL : https://docs.fanconvert.ai/en/api/cles

A key works for both the API and MCP. It starts with `fc_sk_` and **is shown only once**, when it is created.

<Callout type="warn">
Admins only. If FanConvert asks you to change your password before creating a key, change it first in your account settings.
</Callout>

<Callout>
This screen is displayed in French. Labels below are quoted as they appear on screen, with a translation.
</Callout>

## Open the panel [#open-the-panel]

In FanConvert: **Réglages › API & MCP** (Settings › API & MCP), then **Nouvelle clé** (New key). The panel has six steps.

### 1. « À quoi va-t-elle servir ? » (What is it for?) [#1--à-quoi-va-t-elle-servir---what-is-it-for]

- **Brancher un assistant IA** (Connect an AI assistant) — Claude, Cursor… you get the block to paste.
- **Connecter un outil ou un développeur (API)** (Connect a tool or a developer) — Zapier, Make, CRM, your own script. You get a test request.

This choice decides which permissions are offered: an AI assistant never gets permissions it cannot use (writing on a fan, pausing the AI on a fan, webhooks: these only exist in the REST API).

### 2. « Nom » (Name) [#2--nom--name]

A name to recognize it in the list, for example "Claude – management".

### 3. « Créatrices » (Creators) [#3--créatrices--creators]

Tick the creators the key can see. **A creator added later is not included automatically**: create a new key if needed.

### 4. « Droits » (Permissions) [#4--droits--permissions]

| Preset | What it allows |
|---|---|
| **Lecture seule** (Read only, recommended) | See creators, chats, sales, statistics, scripts, media and emergencies. Changes nothing. |
| **Lecture + actions** (Read + actions, API only) | Everything above, plus: label a fan, write the team note, pause the AI on a fan, receive sales by webhook. |
| **Personnalisé** (Custom) | Domain by domain, in plain words: none, read or write. |

The domains of **Personnalisé**:

| Domain | What it covers |
|---|---|
| Créatrices et profils (Creators and profiles) | Name, platforms, profile |
| Discussions (Chats) | MYM and Telegram messages |
| Fans : étiquettes et note (Fans: labels and note) | Add a label, write the team note |
| Pause de l'IA sur un fan (AI pause on a fan) | Stop or restart chatting with a fan |
| Ventes et statistiques (Sales and statistics) | Sales, revenue and sends per creator |
| Scripts et médias (Scripts and media) | Sales scripts, media library; write: import media |
| Réglages de l'agent (Agent settings) | A creator's chatting and negotiation settings |
| Comportement de l'IA (AI behavior) | Guidelines, style, pace, follow-ups, memory; every change is approved |
| Urgences (Emergencies) | What is waiting for a human |
| Webhooks | Receive sales, emergencies and AI pauses live |
| Essais dans le Playground (Playground tests) | Test a creator's AI, nothing is sent |

A key's permissions never change after creation. The technical name of each permission (`creators:read`, `sales:read`…) is on the [Authentication](/en/api/rest/authentification) page.

### 5. « Expiration » (Expiry) [#5--expiration--expiry]

7, 30 or 90 days. The exact expiry date is shown under the choice.

### 6. « Confirmez avec votre mot de passe » (Confirm with your password) [#6--confirmez-avec-votre-mot-de-passe--confirm-with-your-password]

Type your **Mot de passe actuel** (current password), then **Créer la clé** (Create key). If refused, check the password and the fields.

## After creation [#after-creation]

The key is shown **only once**, with the next step:

- "AI assistant" key: **Brancher votre assistant** — the block to paste, already filled with your key. See [Connect your assistant](/en/api/assistant).
- "API" key: **Ensuite : tester la clé** (Next: test the key) — a test request in curl, JavaScript or Python, returning its creators (`creatorIds`), permissions (`scopes`) and expiry (`expiresAt`).

Store it in a password manager. Never paste it in a chat with the assistant, an email or a message. **Lost it? Revoke it and create another one.**

## The « Vos clés » list (Your keys) [#the--vos-clés--list-your-keys]

For each key: its name, what it is for, its creators, its permissions, when it expires and its last use ("Jamais" — never — if it has not been used yet).

- **Révoquer** (Revoke) cuts access from its next request.
- An expired key shows **Supprimer** (Delete) instead of **Révoquer**.