Skip to main content
The Doozy API is currently in closed beta. To request access, please email hello@doozy.live.

​
Enabling API access

API access is disabled by default for all Doozy workspaces. Before anyone can generate an API key, an Admin must enable access for at least one role:
1

Open Doozy settings

Navigate to your Doozy dashboard and open Settings.
2

Open API, MCP & Webhooks

Select API, MCP & Webhooks.
3

Choose the access level

Select the lowest role that can use the API, then save. Member access includes Managers and Admins. Manager access includes Admins.
Clear every role to disable API access for the workspace.

​
Creating an API key

Anyone whose role meets the configured access level can generate an API key. Each person has their own key.
1

Open API Settings

In your Doozy dashboard, navigate to the API keys section.
2

Generate New Key

Click Generate API Key to create a new key.
3

Copy and Store Securely

Copy your API key immediately. For security reasons, the full key is only shown once.
Store your API key securely. Treat it like a password - never commit it to version control or share it publicly.

​
Using Your API Key

Include your API key in the x-api-key header with every request:

​
API Key Format

Doozy API keys follow this format:

​
Access Scoping

API keys inherit the permissions of the user who created them. This means:
  • You can only access quizzes, surveys, and other resources that you have permission to view
  • If you are removed as an admin from a quiz or survey, your API key will immediately lose access to that resource
  • Different users’ API keys may have access to different resources based on their individual permissions
If you need to access data across your entire workspace, ensure the user generating the API key has appropriate permissions for all resources.

​
Rotating API keys

To rotate your API key (recommended periodically for security):
1

Rotate the key

Select Rotate and confirm. Doozy immediately revokes the current key and creates its replacement.
2

Copy the new key

Store the new key securely. You cannot view the full key again after closing the page.
3

Update your integrations

Replace the revoked key in every integration and script that uses it.
Applications using the old key stop working as soon as you rotate it.
Rotate your API keys regularly and immediately if you suspect a key has been compromised.

​
Rate Limiting

The Doozy API enforces rate limits to ensure fair usage: When you exceed the rate limit, the API returns a 429 Too Many Requests response. See the Errors page for details on handling this.
Rate limits are applied per API key. If you need higher limits, please contact us at hello@doozy.live.