API key
Your backend
Create and manage calls.
PurpleCallio documentation
Authentication
PurpleCallio integrations use server-side credentials for API requests and scoped participant access for joining a call.
Keep API keys on your server
Create calls and manage project resources from a trusted backend. Do not put project API keys in a client application or a public URL.
Issue participant access
Pass the participant-specific access returned when a call is created to the chosen call integration. Each participant should receive only their own access.
Credential hierarchy
Participant access
Participant browser
Join only the authorized call.
Dashboard JWT
Dashboard
Manage account and project resources.
Never expose your API key in browser code. Create calls and authorize participants from trusted server code.
Related documentation
Build with PurpleCallio
Explore the documentation to choose hosted UI, React components, or the headless SDK for your integration.