Skip to content

Zapier Authentication

This document describes how to authenticate Zapier with the WhiteLabelCRO Integration API.

Authentication Method

Zapier uses API key authentication via the X-Api-Key header. This is the same authentication method used by n8n, Make, and custom integrations.

When you connect your WhiteLabelCRO account in Zapier, you provide an API key that Zapier includes with every API request.

Obtaining an API Key

  1. Log in to your WhiteLabelCRO CRM
  2. Navigate to Settings > Setup
  3. Click the Third Party Settings tab
  4. Scroll to the Zapier Automation Settings section
  5. Click the Generate New API Key button
  6. A popup will display your new API key
  7. Copy the API key immediately - it's only shown once

Critical: The full API key is displayed only once. Store it securely before closing the dialog.

Connecting in Zapier

Initial Connection

  1. In Zapier, create a new Zap or open an existing one
  2. Select "WhiteLabelCRO.com" as the app
  3. Choose a trigger, action, or search
  4. Click Sign in (or Connect an Account)
  5. In the connection dialog, paste your API key
  6. Click Yes, Continue

Zapier will test the connection by calling the Integration API. If successful, your account is connected.

Connection Testing

Zapier validates your API key by attempting an API request. If the test fails: - Verify you copied the full key (no truncation or extra spaces) - Generate a new key from Settings > Setup > Third Party Settings if needed

Multiple Connections

You can connect multiple WhiteLabelCRO accounts in Zapier: - Use different API keys for different environments - Use different keys for different clients (if you manage multiple CROs)

Each Zap can use a different connection.

Managing Connections

Viewing Connected Accounts

In Zapier: 1. Click your profile icon 2. Select My Apps 3. Find "WhiteLabelCRO" in the list 4. View all connected accounts

Each connection shows a label (auto-generated or custom).

Reconnecting After Key Rotation

If you rotate or revoke an API key:

  1. Generate a new API key from Settings > Setup > Third Party Settings
  2. In Zapier, go to My Apps
  3. Find the WhiteLabelCRO connection
  4. Click Reconnect
  5. Enter the new API key
  6. Click Yes, Continue

All Zaps using that connection will automatically use the new key.

Disconnecting

To remove a connection: 1. Go to My Apps in Zapier 2. Find the WhiteLabelCRO connection 3. Click Delete

This does not revoke the API key in WhiteLabelCRO. To fully revoke access: 1. Delete the connection in Zapier 2. Revoke the API key in your CRM's API key management

Security Considerations

Key Storage

  • Zapier stores your API key encrypted
  • Keys are transmitted over HTTPS only
  • Keys are not visible in Zap configuration or logs

Key Separation

Use separate API keys for: - Different Zapier accounts - Development vs production Zaps - Different integration purposes

This allows targeted revocation without disrupting all integrations.

Revocation

If a key is compromised: 1. Revoke the key immediately in your CRM 2. All Zapier requests will start failing (401 errors) 3. Generate a new key from Settings > Setup > Third Party Settings 4. Reconnect in Zapier with the new key

Troubleshooting

Invalid API Key Error

Symptom: "Authentication failed" or 401 error when connecting

Check: - Key was copied completely (no truncation) - Key format is wlcro_live_{companyId}_{secret} - Key has not been revoked

Resolution: - Re-copy the key from secure storage - If lost, generate a new key from Settings > Setup > Third Party Settings

Connection Works Then Stops

Symptom: Previously working Zaps return 401 errors

Cause: API key was revoked

Resolution: - Generate a new key from Settings > Setup > Third Party Settings - Reconnect in Zapier

Insufficient Permissions

Symptom: Connection succeeds but specific triggers/actions fail with 403 errors

Resolution: - Generate a new key from Settings > Setup > Third Party Settings - Reconnect in Zapier

Multiple Account Confusion

Symptom: Zap is using the wrong WhiteLabelCRO account

Resolution: - Check which connection the Zap is configured to use - Reconnect and select the correct account - Label your connections clearly (e.g., "Production CRO", "Staging CRO")

Best Practices

Regular Audits

Periodically review: - Connected accounts in Zapier - Remove unused connections and revoke unused keys