> ## Documentation Index
> Fetch the complete documentation index at: https://docs.fastcac.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Keys, webhooks and logs

> Create and rotate API keys, add webhook endpoints, and read your request logs.

Each of these pages shows the current mode. Switch **Test / Live** at the top to see the other.

## API keys

Open **API keys**.

| Key | Starts with | Who can create it |
| - | - | - |
| Test | `fc_test_` | Owners, admins and developers. |
| Live | `fc_live_` | Owners and admins (see below). |

Live keys need two things: the business is [verified](https://docs.fastcac.com/dashboard/compliance.md#2-business), and you've
verified your identity. That's your BVN and a selfie, or [your NIN](https://docs.fastcac.com/dashboard/identity.md#your-nin-for-live-keys-only),
which the dialog asks for.

**Create a key:** click **Create test key** (or **Create live key**), give it a name that says
where it's used, and copy it. **You only see it once.** The dialog closes when you click
**I've saved it**. Keep keys on your server; browser calls are refused.

**Roll a key:** makes a replacement and lets you choose when the old one stops: now, in 1 hour, in
24 hours or in 7 days. Use it to rotate without downtime, or straight away if a key leaks. Rolling
doesn't need an identity check.

**Revoke a key:** calls with it fail at once. This can't be undone.

You can have up to 10 active keys per mode. Viewers see the list but can't change it.

## Webhooks

Open **Webhooks**. Owners, admins and developers manage test endpoints; only owners and admins
manage live ones.

**Add an endpoint:** a public `https` URL, an optional description, and the events to send (or all
of them). Click **Add endpoint**.

Click an endpoint to:

* see its delivery stats for the last 24 hours and 7 days;
* show, copy or **rotate** its signing secret (the old one keeps working for 24 hours);
* **send a test event**;
* see each delivery and your server's response, and **resend** one, or every failure since a time;
* pause, resume or delete it.

The **event catalog** lists every event with an example. For the code side, see
[Webhooks](https://docs.fastcac.com/webhooks/overview.md) and [Verify signatures](https://docs.fastcac.com/webhooks/verify-signatures.md).

## Request logs

Open **Request logs**. Every API call you made in this mode, newest first, within seconds. Filter
by **Succeeded** or **Failed**, or search by path, request ID or status. Click a call to see what
the API returned. Request bodies aren't stored. Quote the request ID when you contact support.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.