How to Find Your API Key in Bitrix24

Bitrix24 does not issue an API key in the usual sense. Instead you create an inbound webhook, and the credential is the whole webhook URL — it already contains the user ID and a secret. Anyone who has that URL can act in your Bitrix24 as you, so treat it exactly like a password.

Before you start: check your plan. The Bitrix24 REST API is not available on the free plan. You need a paid plan with a Market subscription, or an active Market trial. You can check under My Plan in the main menu, where Bitrix24 CoPilot + Market also offers an Enable Demo trial. Skipping this is the single most common reason the steps below appear to work and the connection still fails.

Steps to create an inbound webhook in Bitrix24

1. Open Developer resources In the left-hand menu, open Applications, then Developer resources. (Developer resources sits inside Applications — it is not a top-level item.)

2. Choose an inbound webhook On the first tab, choose Other, then Inbound webhook. Depending on your Bitrix24 version this may be labelled Incoming webhook.

3. Assign permissions In the Assign permissions step, tick the areas the integration needs. For a tool that adds contacts, companies and activities, that is CRM, Tasks and Users.

4. Save and copy the URL Save the webhook, then copy the entire URL. It looks like this: https://yourcompany.bitrix24.com/rest/12/abc123xyz/ The 12 is the ID of the user who created it and abc123xyz is the secret key. Copy all of it, including the trailing slash.

Two things that surprise people

The webhook inherits its creator's permissions. Bitrix24's REST API never grants more access than the person who created the webhook already has. If you create it from a limited account, the integration will silently see fewer records. For a company-wide integration, create it from an administrator account.

Only the creator can see the webhook. If an administrator edits someone else's webhook, the key is reset and ownership transfers to that administrator — which breaks whatever was using the old URL. If a working integration suddenly stops, this is worth checking first.

Keeping the webhook safe

Because the secret is part of the URL, it can leak through browser history, screenshots and support tickets. Create a separate webhook per integration, delete any you no longer use, and never post the full URL anywhere public.

Connecting Bitrix24 to LinkedIn with Add to CRM

Add to CRM takes that webhook URL and adds contacts to Bitrix24 straight from LinkedIn, Gmail and Outlook, with verified email addresses and phone numbers already filled in. Paste the URL once on the connect screen and every profile you open is one click from your CRM.