# Which API key is used to sign the payload for is used to authenticate a Sendbird web-hooks "x-sendbird-signature"?

**URL:** <https://community.sendbird.com/t/which-api-key-is-used-to-sign-the-payload-for-is-used-to-authenticate-a-sendbird-web-hooks-x-sendbird-signature/2841>\
**Category:** FAQs & Guides\
**Tags:** api-key, x-signature\
**Created:** [August 12, 2021, 4:54pm UTC](https://community.sendbird.com/t/which-api-key-is-used-to-sign-the-payload-for-is-used-to-authenticate-a-sendbird-web-hooks-x-sendbird-signature/2841 "2021-08-12T16:54:32Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Sendbird](https://sea2.discourse-cdn.com/flex020/user_avatar/community.sendbird.com/sendbird/32/5002_2.png) [@Sendbird](https://community.sendbird.com/u/Sendbird)\
**Post date:** [August 12, 2021, 4:54pm UTC](https://community.sendbird.com/t/which-api-key-is-used-to-sign-the-payload-for-is-used-to-authenticate-a-sendbird-web-hooks-x-sendbird-signature/2841/1 "2021-08-12T16:54:32Z")

</div>

Sendbird has multiple API tokens available in the Sendbird Dashboard → Settings → General → API tokens. There is one Master API token that is masked and there is a tool in the Dashboard to create Sub API Token.

Only the master API token. Therefore, take steps to mask and protect it for production services. If at any point your master API token is compromised, please contact Sendbird urgently via dashboard ([Dashboard | Sendbird](https://dashboard.sendbird.com/settings/contact_us))