# Developers: API keys, webhooks and the account connector

Source: https://frosvo.com/docs/developers
Updated: 2026-10-22

Connect Frosvo to your own systems with scoped API keys, a REST API, signed webhooks, a TypeScript client, Slack and the account connector. Full reference and OpenAPI description included.

Owners create **API keys** in Settings → API, each limited to the scopes it needs. Full reference: [Developers](/developers) and the [OpenAPI description](/openapi.json).

- **REST API** — conversations, messages, contacts, articles and reports.
- **Webhooks** — signed events when conversations start, messages arrive, chats are resolved or rated, and deadlines are missed. Retried for about two days, and replayable.
- **TypeScript client** — one typed file, with webhook signature checks.
- **Slack** — new and waiting conversations, ratings and missed deadlines in a channel (Settings → Integrations).
- **Account connector** — show the customer's account from your own panel, shop or CRM beside every conversation, and let your team act on it, with every action recorded.

Creating an API key or a webhook is recorded in the audit log and emailed to the other owners.

## Getting started

1. Open **Settings → API** as an owner and create a key with the narrowest scope that works.
2. Call the REST API with the key as a bearer token. The full reference is on the [developers page](/developers) and in the [OpenAPI description](/openapi.json).
3. To receive events, add a webhook and verify its signature on every request.

Keep keys out of source code and browser pages. Rotate a key if you suspect it leaked: create a new one, switch your system over, then delete the old one.

## Related guides

Send events to chat tools with [Slack and the account connector](/docs/slack-and-account-connector), add ready-made tools from [plugins](/docs/plugins), and keep keys safe with [account security](/docs/security).

## Common questions

### How do I limit what a key can do?

Each API key is created with only the scopes it needs. Create separate keys for separate systems.

### How long are webhooks retried?

For about two days, and events can be replayed.

### Is creating a key recorded?

Yes. Creating an API key or webhook is recorded in the audit log and emailed to the other owners.