How to Get Your Poe API Key
Every Poe Canvas app that uses AI models needs a Poe API key to function outside of the Poe platform. When you convert your Canvas app into a standalone web app with AppToPub, the API key is what lets your deployed app communicate with AI models like GPT-4, Claude, and Gemini. This guide explains exactly how to get one.
What Is a Poe API Key?
Poe provides a developer API that lets external applications send messages to AI models and receive responses. Your API key is the credential that authenticates these requests. Think of it as a password that proves your app has permission to use Poe's AI infrastructure.
When your Canvas app runs inside Poe, it uses Poe's built-in authentication automatically. But once you export it and host it as a standalone web app, it needs your API key to continue working. AppToPub encrypts your key with AES-256 and never exposes it in the app's source code.
Step-by-Step: Get Your Poe API Key
- Log in to Poe. Go to poe.com and sign in with your account.
- Open your account settings. Click your profile icon in the top-right corner, then select Settings from the dropdown menu.
- Navigate to API Keys. Go to poe.com/api_key directly, or find the API Keys / Developer section in the settings sidebar.
- Generate a new key. Click the Create API Key button. Poe will generate a unique key string — it typically starts with a prefix and contains a long alphanumeric string.
- Copy and store the key securely. Copy the key immediately. Poe may only show it once. Store it in a password manager or secure note — do not share it publicly or commit it to source code.
API Key Security Checklist
Your API key grants access to Poe's AI models on your account. Treat it like a password:
- Do store your key in a password manager or encrypted note. Don't paste it into public chat rooms, GitHub repos, or social media posts.
- Do use AppToPub's encrypted key storage — your key is AES-256 encrypted before it touches the database. Don't embed the raw key directly in any HTML or JavaScript file you share.
- Do rotate your key immediately if you suspect it's been compromised. Don't reuse the same key after a security incident without revoking the old one first.
- Do monitor your Poe usage dashboard for unexpected spikes. Don't ignore email alerts from Poe about unusual activity.
How AppToPub Uses Your API Key
When you paste your API key into AppToPub during the conversion process, here's what happens:
- Your key is encrypted using AES-256 encryption before being stored in the database. The raw key is never saved in plaintext.
- When someone visits your deployed app, AppToPub's backend server decrypts the key on the fly to proxy API requests to Poe. The key is never sent to the user's browser.
- The original Canvas app's API calls are rewritten to route through AppToPub's secure proxy, so your key stays hidden from end users.
This architecture means your visitors get a seamless AI-powered experience while your API credentials remain protected. See our privacy policy for full details on how we handle sensitive data.
API Key Limits and Usage
Poe API keys have usage limits that depend on your Poe subscription tier. Here are some practical considerations:
- Rate limits — Poe imposes rate limits on API calls. High-traffic apps may hit these limits during peak usage. Consider this when sharing apps broadly.
- Model access — Your API key's available models depend on your Poe subscription. Free accounts may have limited model access compared to paid subscriptions.
- Cost — API calls consume Poe compute credits. Monitor your usage in Poe's dashboard and in AppToPub's analytics to avoid unexpected charges.
Troubleshooting
- I don't see an API Keys section in my settings
- API key access may require a Poe subscription or developer account enrollment. Check Poe's documentation for current eligibility requirements.
- My key isn't working after pasting it into AppToPub
- Make sure you copied the entire key string without leading or trailing spaces. Also verify the key hasn't been revoked in your Poe settings.
- Can I use the same key for multiple apps?
- Yes. A single Poe API key works across all your AppToPub deployments. All apps will share the same rate limits and usage quota tied to that key.
- Should I rotate my key periodically?
- It's good security practice. If you rotate your key in Poe, you'll need to update each deployed app in AppToPub with the new key through the Projects dashboard.
What's Next?
You have your API key — now it's time to grab your app's source code. The next step is exporting your Poe Canvas app as HTML, which takes about 30 seconds and sets you up for the conversion process.