Skip to main content
Authenticate, debug, and extend your Truv integration from one place — manage API keys, inspect request logs, and configure webhooks. The Development section has three tabs: API Keys, Logs, and Webhooks.

API Keys

The API Keys tab is where you find and manage your Truv credentials. Truv Dashboard - API Keys

Client ID

Your Client ID is displayed at the top of the page. Pass it as the X-Access-Client-Id header on all API requests.

Keys table

The table shows all API keys for your account, grouped by environment (Sandbox, Development, Production):
ColumnDescription
EnvironmentSandbox, Development, or Production
Created dateWhen the key was generated
SecretMasked except for the last four characters
Last usedMost recent API call authenticated with this key

Actions

  • Reveal — Show the full key value on screen
  • Copy — Copy to clipboard without revealing
  • Delete — Permanently remove the key (irreversible)
  • Generate new key — Create a new key for an environment
You cannot have more than two active keys per environment. Deleting a key is permanent and immediately revokes authentication for any system using it.

Rotate API keys

To rotate keys without downtime:
  1. Generate a new key
  2. Update your integration to use the new key
  3. Test to confirm the new key works
  4. Delete the old key only after confirming the new key is live
See API Keys Rotation for the full rotation guide.

Logs

The Logs tab shows a record of all API requests associated with your account. Truv Dashboard - Logs

Filters

FilterDescription
Date rangeNarrow to a specific time window
StatusHTTP response status: 200, 400, 500, etc.
BrandFilter by a specific sub-company or brand
Use Logs to debug integration issues, trace specific requests, and understand API traffic patterns.

Webhooks

The Webhooks tab lets you configure endpoints where Truv sends event notifications. Truv Dashboard - Webhooks

Create a webhook

FieldDescription
NameA label to identify this webhook
URLThe HTTPS endpoint where Truv sends POST requests
EnvironmentProduction, Development, or Sandbox
EventsThe event types that trigger this webhook
Always validate the X-WEBHOOK-SIGN header before processing any webhook payload. See Webhook Security.
See Webhook Events for the full list of supported event types and payload schemas, and Webhooks for delivery best practices — 10-second timeout, retry behavior, and idempotency guidance.

Next steps

Authentication

API authentication reference

Webhook Events

Full list of webhook event types

API Keys Rotation

Step-by-step key rotation guide

Security

Webhook signature verification