> ## Documentation Index
> Fetch the complete documentation index at: https://docs.anyway.sh/llms.txt
> Use this file to discover all available pages before exploring further.

# Developer Settings

> Create scoped API keys and manage webhook endpoints.

Open the profile menu in Business view and select **Developers**. The page has separate **API Keys** and **Webhooks** tabs.

## API key types

| Key                  | Use it for                                                                        | Send it as                                         |
| -------------------- | --------------------------------------------------------------------------------- | -------------------------------------------------- |
| Merchant API key     | Access products, orders, subscriptions, customers, and entitlements from a server | `X-API-Key`                                        |
| Agent Traces API key | Send telemetry from the Anyway SDK                                                | SDK configuration or `Authorization: Bearer <key>` |

Create only the key type required by the integration. Copy a new secret immediately and store it in a server-side secrets manager; the complete value may not be shown again.

<Warning>
  Never put either key in browser JavaScript, a mobile binary, source control, screenshots, support tickets, or telemetry.
</Warning>

## Webhook endpoints

The **Webhooks** tab lets you create, update, enable, disable, and remove organization-scoped HTTPS endpoints. Anyway signs deliveries with its platform Ed25519 key; verification uses the published public key rather than a per-endpoint shared secret.

<CardGroup cols={2}>
  <Card title="Merchant API" icon="terminal" href="/api-reference/merchant-api">
    Review the stable server API and its generated contract.
  </Card>

  <Card title="Webhook API" icon="webhook" href="/features/webhooks">
    Verify signatures and implement idempotent fulfillment.
  </Card>
</CardGroup>