M.K

Hello everyone. This is the AmiVoice Cloud Platform sales team. 

This may seem sudden, but how are you handling the "API key,"
which is essential connection information when using the AmiVoice API?

"I've set it up for now, but I'm actually a little worried about the security..."
"Ideally, I'd like to use it more safely..."
I think there are probably some people who think that way.

The "API Key" is authentication information required when using the AmiVoice API and constitutes highly important confidential information. If this key is leaked, it may be used fraudulently by third parties, potentially resulting in unexpected charges.

As a service provider, we ask our customers to carefully manage their API keys so that they can use AmiVoice with peace of mind for a long time. 

This article will introduce further ways to utilize such "API keys." 

*Effective April 14, 2026, the authentication information name for the AmiVoice API has been changed from the previous "APPKEY" to "API Key".
　Accordingly, we are gradually updating the wording in MyPage, manuals, and API error messages. 
　For more details, please see the news page below.
　 [AmiVoice API] Notice of Authentication Key Name Change (from APPKEY to API Key) – AmiVoice Cloud Platform 

• What is an API key? 

• Benefits of using the API key issuance function 

• How to issue it on MyPage 

• Regarding API key issuance via API 

• How to delete an API key 

• Points to note when using API keys 

• Summary: For more secure API key usage, the API key issuance function is ideal 

• Final thoughts 

What is an API key?

Dear users, are you aware that since the MyPage renewal in June 2025, it has become possible to issue API keys from MyPage?

Previously, API keys could only be issued through development using the "Issue API key," but since the MyPage renewal, you can now easily issue them from MyPage without any development required! 

"API keys contain important information, so we want to handle them as securely as possible." 

"We want to allow the AmiVoice API to be used only from specific networks." 

The API key issuance function is useful in such situations.

It is possible to create keys with expiration dates, restrict the use of the AmiVoice API to specific locations (by restricting source IP addresses), and immediately invalidate keys when unauthorized use is detected. Such convenient API keys can be created from the MyPage using a GUI.

This article will discuss the API key issuance function. 

• Benefits of using it 
• Issuance method 
• Deletion methods and precautions 

We will focus on introducing the following. 

In addition to the information presented in this article, the API key is also described in the manual. For more detailed information, please see the page below.

API Key | AmiVoice API Manual | AmiVoice Cloud Platform 

Benefits of using the API key issuance feature 

First, let's summarize the advantages of using the API key issuance feature. 

You can set an expiration date 

When issuing an API key, an expiration date can be set.

The expiration date is determined by the issue date/time and validity period, and it will be automatically invalidated after the expiration date has passed.

This minimizes the impact in the event that API keys are leaked. 

Note that when issuing an API key, it is also possible to set the expiration date as "indefinite".

Source IP address restriction is available 

When issuing an API key, you can specify the IP addresses that are allowed to connect.

It also supports specifying multiple source IP addresses. 

By specifying the IP addresses from which connections are permitted, access can be restricted to specific locations, such as the internal network. This allows for operation that prevents unauthorized access. 

Similar to setting an expiration date, even if your API key is leaked, you can minimize the impact by specifying the available source IP addresses in advance. 

How to issue it on MyPage 

From here, we will explain how to actually issue an API key from your MyPage and how to configure your connecting IP address. 

STEP 1: Open the issuance screen on MyPage 

Log in to MyPage and click "Issue API key (APIキーの発行)" in the Connection Information (接続情報) section.

* Login to MyPage here

STEP 2: Enter the issuance settings 

On the API key issuance screen, you will enter the settings for the API key you want to issue. The main items you can configure are as follows: 

① Expiration date 

• Set a specific date 
• The expiration date is set based on the issue date 
• Indefinite period 

You can choose from these three options. 

When issuing an API key using the API Key Issuance API, you can specify the validity period in milliseconds. 

② Source IP address 

Enter the source IP address you wish to permit connection from. Multiple specifications are possible.

By configuring this setting, access control will be implemented at the IP level. 

(Reference: Q. When using the BIZTEL speech recognition linkage, if I want to use an API key with specified IP addresses for the ACP API key, which IP address should I specify?)

③ API key issuance permissions presence or absence

This is a feature intended for developers who utilize the API key issuance API. When the "Issuable" checkbox is checked, it will be issued as an "API key that can issue API keys".

When using the API Key Issuance API, it is necessary to specify either the API key issued with the "API Key Issuance Enabled" setting or the Service ID and Service Password that can be confirmed on MyPage as request parameters.

For API key issuance from MyPage, ① and ② are the main configuration items. After setting the required information in ① and ②, click "Issue" to generate the API key.

STEP 3: Verify the issued API key 

The issued API key will be displayed in the blank space labeled ④ in the image. Please copy and use it. 

The issued API key will become available for use 10 minutes after issuance.

Please be assured that the issued API key can be viewed and copied from the connection information section in MyPage even after closing the issuance screen. 

Regarding API key issuance via API 

This is a feature for developers, but API keys can be issued not only from MyPage but also by using the "API Key Issuance API".

Issuance from MyPage is optimal when you want to easily perform settings and management, but in actual system operations and service integration,

• I want to issue API keys according to the timing of the processing. 
• I want to issue a large number of API keys that are only valid for a short time. 
• I want to control the issuance and revocation of API keys from the system side. 

These kinds of requirements may sometimes be necessary. 

The API key issuance API is capable of addressing such practical needs. By using the API key issuance API, API keys with expiration dates and source IP address restrictions can be issued dynamically from the server side.

For detailed instructions on how to use the API key issuance API, please refer to the manual below. 

How to use the API Key Issuance API | AmiVoice API Manual | AmiVoice Cloud Platform 

How to delete an API key 

API keys can also be deleted from MyPage.

The corresponding API key will become unavailable 10 minutes after deletion.

However, whether or not deletion is possible depends on the issuance method and when the account was created. 

✔ API key issued on MyPage (after June 2025, 06) 

→ Deletion is possible. However, please note that there is a limit to the number of API keys that can be deleted (10).

The procedure is as follows. 

① Check the checkbox for the API key you want to delete. 

② Click "Delete (削除)"

③ On the "Delete API Key (APIキーの削除)" screen, confirm that the API key is correct, then click the "Delete (削除)" button.

④ Enter the authentication code (認証コードの入力) sent to the email address registered to the account and click the "Send (送信)" button.

⑤ Once the API key deletion is complete, you will receive an email notification to the email address registered to your account informing you of the API key deletion. 

In cases where "a key was issued by mistake" or "leakage or unauthorized use is suspected", please delete the API key using these methods.

Please note that the API key deletion function is primarily intended for emergency deactivation (key revocation blacklist), and there is a limit to the number of keys that can be deleted. Deletion for routine operation or update purposes is not intended, so please be aware of this.

Please note that the following API keys cannot be deleted from your MyPage. 

✔ API keys issued for accounts created before June 2025, 06 

→ Deletion is not possible. To delete, withdrawal and re-registration are required.

✔ API key issued via the API Key Issuance API 

→ You cannot delete it from MyPage. 

Points to note when using API keys 

While API keys are convenient, if you forget that they have an expiration date, speech recognition may stop at an unexpected time.

In fact, there have been cases where customers contacted us saying, "Speech recognition suddenly stopped working," and upon reviewing their usage history, we found that the cause was an expired API key.

When using the AmiVoice API, please refer to the following points to ensure that your API key does not expire while you are using speech recognition. 

Countermeasures 

• Do not set the expiration date to a value that is too short depending on the operating period 
• Establish rules for regular updates 
• For services intended for long-term operation, using an unlimited API key is also an option 　*

*We recommend using unlimited API keys only if you can ensure sufficient security, such as by strictly managing the purpose and source of access.

Because there is a limit to the number of API keys that can be deleted, we do not recommend the practice of issuing keys indefinitely just because they can be deleted later. Unless you are certain that you will be using the API key continuously, please set an expiration date for your API key.

Your API key is important. Please manage it carefully yourself! 

Furthermore, the basic handling of API keys is explained in the Tech Blog linked below! Please take a look. 

Handling of AmiVoice Cloud Platform AppKey

Summary: For more secure API key usage, the API key issuance function is ideal 

By using the API key issuance function, you can easily implement IP address-based access restriction and expiration date settings from your MyPage, and you can also utilize the API key issuance API for practical purposes.

The main benefits of this feature are as follows:

• An expiration date can be set 
• Access can be restricted by source IP address limitation 
• Can be issued easily and repeatedly whenever necessary
• You can also complete the issuance and deletion process through MyPage 

For those who want to use the AmiVoice API with peace of mind, even in a cloud environment, this system is designed to be easy to use and enhance security.

Please take advantage of our API key issuance feature to meet your security requirements! 

Final thoughts

The API key issuance function is extremely useful, as it allows you to add various functions to keys and quickly delete them in the event of fraud. This enables you to explore and implement speech recognition use cases with a free and creative approach while ensuring a high level of security.

We hope this article will serve as a starting point for considering new operational models and business development utilizing the API key issuance function.

Going forward, we will continue to share information about the MyPage function and tips on how to use it, so that you can use the AmiVoice Cloud Platform more conveniently and with greater peace of mind. 

Be sure to check out our future Tech Blog posts!