Reguly
Reguly Docs

Insights

API keys

When you want to use Reguly data in another system — e.g. your ERP, an analysis tool or a channel platform — you need an API key. Here you manage keys, set permissions and see what was queried via them.

Plan upgrade required

Why API keys?

  • ERP integration: Sync products and packaging data between ERP and Reguly.
  • Channel partners: Wholesalers or marketplaces can fetch DOCs and DPPs at the press of a button.
  • BI analyses: Read Reguly data into Looker, Power BI, Metabase etc.
  • Custom apps of your own: When you build your own app that should display Reguly data.

Step by step: create a key

  1. 1

    Open the key area

    In the dashboard under 'Insights → API keys'. You see a list of all existing keys.

  2. 2

    Generate new key

    Click 'Create new key'. Enter a meaningful name (e.g. 'Power BI Sync') and pick permissions.

  3. 3

    Set permissions

    Per area you choose: read, write or no access. Example: read-only on products and DOCs, no access on account.

  4. 4

    IP restriction (optional)

    You can specify which IP addresses the key is valid from — extra security when your third-party system has a fixed IP.

  5. 5

    Copy the key

    Reguly shows the key once in plain text — copy it now and store it securely. We cannot show the key again.

  6. 6

    Enter key in third-party system

    In the third-party system you enter the key as a bearer token. Reguly uses OAuth-2.0 bearer auth for maximum compatibility.

Keys are like passwords

Never check them into Git, email or Slack. When a key accidentally goes public, revoke immediately and create a new one.

Available API endpoints

Reguly offers a REST API with the following main endpoints:

  • /api/v1/products — read, create, update products.
  • /api/v1/docs — read, generate DoCs.
  • /api/v1/passports — read, update DPPs.
  • /api/v1/reports — read, export quantity reports.
  • /api/v1/analytics — read anonymised reach data.

Full endpoint reference with examples can be found at https://reguly.eu/api/docs.

Rate limits

  • Standard plan: 60 requests/min, 10,000 requests/day
  • Pro plan: 300 requests/min, 100,000 requests/day
  • Enterprise: on agreement

On exceeding, Reguly responds with HTTP 429 and a Retry-Afterheader. You also see current rate limits in the dashboard.

FAQ

Can I change a key later?
You can adjust permissions and IP restrictions afterwards. The key value itself cannot be changed — to rotate it, create a new one and revoke the old.
What happens to a revoked key?
Reguly responds with HTTP 401 to all further requests using this key. The revocation is logged in the audit log.
Can I use webhooks?
Yes — in the 'Webhooks' tab you configure URLs that Reguly POSTs to on certain events (e.g. new DOC, expired certificate).
Are API calls logged?
Yes, every call appears in the 'Usage' tab with timestamp, endpoint and status. That way you can trace problems in third-party systems.

Related pages