# Authentication Learn how to authenticate securely with the BookingPress API ## Introduction BookingPress API Extension uses an API Keys based authentication system to ensure the security of your data. Each API request must include a valid key to be processed. ### API Key Generation ### #### Create a New API Key 1. Go to BookingPress > Settings > API Settings in your WordPress dashboard 2. Click "Generate" New API Key 3. Configure the necessary permissions 4. Copy and save the generated key securely > [!IMPORTANT] The API Key is only shown once. If you lose it, you’ll need to generate a new one. #### Permission Configuration API Key can have specific permissions for different resources: #### Supported APIs 1. Services - Define services and manage them with options to create, read, update, and delete service data. 2. Categories - Define categories and manage them with options to create, read, update, and delete categories data. 3. Staff Members - Define staffmembers and manage them with options to create, read, update, and delete staffmember data. 4. Customers - Define customers and manage them with options to create, read, update, and delete customers data. 5. Appointments - Enable or disable various actions for managing appointments, such as creating, updating, reading, and deleting appointments. 6. Payments - Enable payment-related actions like listing payments, updating payment statuses, and initiating refunds. 7. Coupons - Define coupon and manage them with options to create, read, update, and delete coupon data. 8. Locations - Define location and manage them with options to create, read, update, and delete location data. 9. Packages - Define packages and manage them with options to create, read, update, and delete packages data. 10. Gift Cards - Define Gift cards and manage them with options to create, read, update, and delete gift cards data.