Sleekplan uses different authentication mechanisms depending on what you are integrating with. This page summarizes each and links to the detailed guide.
Choose your auth method
Where to find your credentials
Both the JWT SSO private key and the REST API key are available in Settings → Developer at https://app.sleekplan.com/settings/developer.
Treat both secrets like passwords. Never commit them to source control, expose them in client-side code, or share them in public channels.
Choosing the right method
- Authenticate a logged-in user in the widget → JWT SSO.
- Read or write Sleekplan data from your own backend → API key.
- Let an AI assistant query Sleekplan in natural language → MCP OAuth.
- React to events happening in Sleekplan → Webhook secret (plus, optionally, an IP allow-list).
- Render custom UI inside the Sleekplan admin → Canvas
X-Secret.
