---
title: "Manage API access in Sitecore CDP"
slug: "manage-api-access-in-sitecore-cdp"
abstract: "Overview of how to manage API access (Sitecore CDP)."
---
# Manage API access in Sitecore CDP

Team members with an *Organization Admin* or *Organization Owner* role in Sitecore Cloud Portal can manage API access.

To use the Sitecore CDP APIs, you must have a client key and API token so Sitecore can authenticate any of your services that call the Sitecore CDP APIs.

You also need your client key to activate the Sitecore Engage SDK on your website to start capturing guest behavior.

To manage API access:

1. On the navigation menu, click ![cdp_gear_icon.png](https://doc.sitecore.com/api/markdown-image/cdp/en/users/sitecore-cdp/images/cdp_gear_icon.png), **API access**.
2. Complete or verify the following fields:
    - **Client Key**: This field displays your organization's client key. A client key is a unique identifier that Sitecore CDP uses to authenticate the client it receives API calls.
    - **API Token**: To generate an API token, click **Generate**. Sitecore CDP generates an API token that displays in the API token field.

        > [!note]
        > An API token is a unique key that Sitecore provides your organization to authenticate services, such as a website or mobile application when making calls to the Sitecore CDP APIs.

    - **API Token Active**: Select the **ON** radio button next to the **API Token Active** field to enable the use of the API token.
3. Click **Save**.

> [!warning]
> Ensure that you keep your client key and API token secure. Never send this information in an email message that uses plain text and is not encrypted.