- Where the API Key originates
- What permissions users approve
- When users are redirected to your product
- When your integration should expect the API Key
Overview
Integrated API Keys are generated automatically during installation of a supported integration. Customers do not manually create these keys. Instead, Pleo creates a customer-specific API Key after the user grants permissions to the integration.High-Level Installation Flow
- Customer selects an integration in Pleo
- Pleo displays requested permissions
- Customer approves access
- Pleo generates an Integrated API Key
- Customer copies the API Key
- Customer is redirected to the integration
- Customer provides the API Key inside the integration
- Integration validates the connection
- Successful activation redirects the user back to Pleo
Step-by-Step Customer Experience
1. Customer initiates installation
In the Pleo Web App:- Navigate to Settings
- Select Accounting
- Choose the integration (example: Microsoft Dynamics 365 Finance)

2. Permission approval
Pleo displays the permissions required by the integration. The user must explicitly approve access. After clicking Allow, installation continues.3. Integrated API Key generation
Pleo generates a customer-specific Integrated API Key. The user is shown:- The API Key
- A copy-to-clipboard button
- Installation instructions
- Copy the API Key above
- Click the button below to open the integration
- Log in to the integration
- Provide the copied API Key
- Complete connection setup

4. Redirect to integration
The user clicks: Go to [Integration Name] They are redirected to your product to complete setup.5. Integration activation
Inside your integration:- User pastes the API Key
- Integration validates connectivity
- Successful validation completes installation
- User may be redirected back to Pleo
Developer Expectations
Your integration should assume:- The API Key is copied manually by the customer
- The user may switch tabs during installation
- Validation must occur immediately after entry
- Installation is not complete until validation succeeds
Integrated API Keys vs Standalone API Keys
| Aspect | Integrated API Keys | Standalone API Keys |
|---|---|---|
| How access begins | Customer installs integration from Pleo | Customer creates API Key in Settings |
| Key creation moment | Generated during installation flow | Generated manually in API Keys settings |
| Permission configuration | Predefined by Pleo integration setup | Selected by customer when creating the key |
| Customer approval | Granted by approving installation permissions | Granted when selecting scopes during key creation |
| Relationship to integration | Key is tied to a specific integration install | Key can be used by any compatible integration |
| Key ownership model | One key per customer installation | One or more keys per company environment |
| Typical usage | Approved accounting / ERP integrations | Custom or developer-built integrations |
Related Reading
- Integrated API Keys Overview
- Security and Credential Management for Integrated API Keys
- OAuth 2.0 Overview