1. Home
  2. Configuration
  3. Configuration — API

Configuration — API

The Configuration – API page provides the ability for you to create new API applications as well as the ability to view and edit current API configurations.

The Kochava Management API provides real-time alerts for fraud detection, retrospective insights into data trends, and tools for configuration management. OAuth2 authentication secures all access.

For more information on the Attribution API and access to the API Playground, refer to our AIM Platform documentation.


Create a New API Application

  1. Click Create New API Application.
  2. Enter an Application Name.
  3. Enter a Description.
  4. Click Create API Application.

After you create a new API application, it appears at the top of the page with its Client ID, Client Secret and description.


Using the API

The API delivers AIM attribution data through a streamlined and flexible GraphQL interface.

To use the API, you will need to authenticate to the AIM platform with a JWT access token in the Authorization header of every request in the format Bearer {token}.

Once the API Application has been created, you can generate an access token, view the CURL, C#, Go, Java, Node.JS, PHP, Python or Ruby code samples.


Edit the API

Editing the API allows you to update the Application Name, Status or Description.

  1. Click Edit.
  2. Update the Application Name. (optional)
  3. Update the Description. (optional)
  4. Click Inactive. (optional)

WARNING: Once an application is inactive, the client ID and client secret will immediately stop working. This action should only be taken if this application is not being utilized anywhere in production.

  1. Click Update API Application.

Rotate Secret

Rotate the Client Secret for enhanced security, compliance and incident response according to your company’s best practices.

  1. Click Rotate Secret.
  2. Click Ok in the confirmation pop-up.
  3. Copy the new Secret and securely send it to clients.

CAUTION: Rotating the client secret permanently deactivates the current one, making it unusable. A new client secret will be created and displayed. Be sure to copy and update it in all applications that rely on it, as the old secret will no longer work


Delete API Application

WARNING: Deleting an application is permanent and cannot be undone. This action will revoke the client ID and client secret, making them immediately unusable. Only delete an application if it is no longer needed or actively used in production.

  1. Click Delete.
  2. Click Ok in the confirmation pop-up.
Updated on September 29, 2025

Was this article helpful?