API Keys
Manage your API credentials for Axle integration.
What are API keys?
Your API key is a credential that authorizes access to Axle's payment system. You need it to add the Axle payment button to your Framer site.
Keep your API key confidential. Never share it publicly or commit it to version control. If compromised, revoke it immediately and generate a new one.
Accessing your API keys
- Log into your Axle dashboard
- Click API Keys in the sidebar
- You'll see your current keys listed
Your keys
Live key
Your Live API Key (starts with axle_live_) is used in production for:
- The Framer head snippet
- Real customer payments
- Production API requests
Test key (if available)
Your Test API Key (starts with axle_test_) can be used for:
- Testing payment flows
- Development and staging environments
- No real charges are processed
Only use the test key in non-production environments.
Copying your key
- Find the key you need (Live or Test)
- Click the Copy button next to it
- The key is now in your clipboard
- Add it to your Framer site's head snippet in Site Settings → Custom Code → Head
Generating a new key
If you need a new key:
- Click Generate New Key
- Choose Live or Test
- Click Confirm
- Your new key will appear in the list
Keep the new key handy — you'll need to update any systems using the old key.
Revoking a key
If a key is compromised or no longer needed:
- Find the key in your list
- Click the Revoke button (three dots menu)
- Confirm the revocation
Revoking a key will immediately stop any systems using that key. Make sure to update your Framer snippet and any integrations to use a new key before revoking.
After revoking:
- The old key will no longer work for API requests
- Payments using the Framer component will fail until updated
- Payment buttons will show a validation error
Best practices
- Rotate keys periodically - Generate a new key and revoke the old one every 6 months
- Use separate keys - Keep test and live keys separate
- Never expose in client code - Only use your key in secure contexts (Framer custom code is secure)
- Update promptly - If a key is compromised, revoke and regenerate immediately
- Document where keys are used - Keep a list of which systems use which keys
Troubleshooting
"Invalid API key" error
Check that:
- You're using the correct key (Live vs Test)
- The key hasn't been revoked
- The key is copied correctly with no extra spaces
Payments stopped working after key change
Make sure you:
- Updated the API key in your Framer head snippet
- Published your changes
- Cleared your browser cache (Ctrl+Shift+Delete)
Next steps
Learn how to add the head snippet or register your domains.