---
title: "How to get a Secret Key"
description: "A simple, step-by-step method for acquiring the X-Secret-Key needed to authorize Topol Plugin template JSON-to-HTML conversion requests."
url: https://docs.topol.io/email-editor/guide/how-to-get-secret-key.html
---

# How to get a Secret Key

**The Secret key authorizes direct calls to the Topol API: pass it as the `X-Secret-Key` request header.**

To get your Secret key:

1.  Log into your [Topol Account](https://app.topol.io) and open the **API Tokens** tab.
2.  Select your API token and open its **API Keys** tab.
3.  Copy the **Secret key**.

![API token detail with the Secret key in the API Keys tab](https://docs.topol.io/new-api-token.png)

> **WARNING**
>
> Keep the Secret key secure. It can only be viewed once, and it must never appear in client-side code.

One use for the Secret key is a POST request to the [Convert JSON Template to HTML](https://docs.topol.io/email-editor/guide/operations/convertJson2Html.html) API, which returns the HTML for a template with specific settings such as a chosen language mutation.