Provide sending API keys specific to domains.
This would enable finer grained control for development teams that have multiple environments or applications using the same account.
For example, credentials to send from development / sending domains would be different than the ones needed to send from the production domain.

Hi all,
I’m happy to announce that we’ve released our Domain Sending Keys feature. Domain Sending Keys will allow you to create multiple API keys, similar to SMTP credentials, per domain that will only allow sending messages via our /messages and /messages.mime endpoints for the domain the key was created for.
Domain Sending Keys are available on your account today. You can assign new keys to your domains by navigating to “Sending” > “Domains”, select a sending domain, then click on “Domain Settings” and then on the Sending API keys tab. From there, click on “Add Sending Key”, provide a useful description, hit “Create Sending Key”, copy your key and add to your application and start sending!
We hope you enjoy using this new feature!
-
Charlie Hayes commented
This should probably be merged with https://mailgun.uservoice.com/forums/156243-general/suggestions/7179404-implement-a-test-api-key
-
Bret Weinraub commented
This would be really nice. Mailgun is a nice service, but I'm feeling like I need to create a new account for every domain.......
-
Till Backhaus commented
I'd really appreciate it if you fixed this.
-
Anonymous commented
crazy this hasn't been done, there are very high profile examples of security breaches due to developers losing prod API keys - in my country this could lead to multimillion-dollar fines if private user data was to be leaked
-
Shane Turner commented
This is vital for us as well. We've had to migrate our clients to MailChimp.
-
Rolands Umbrovskis commented
+1
just asked the same thing from support :) -
Chris Moyer commented
And the ability to reset them... right now I can't even do that. What happens when my API key gets stolen?
-
Anonymous commented
+1
-
Anonymous commented
Yes this is really needed! I wonder why mailgun still hasn't.
-
Orion N McClelland commented
I also need this as I am providing service to a client, and I don't feel comfortable that the client has free access to my API key in the mailgun wordpress plugin. That's not a very secure approach.
-
Anonymous commented
An essential feature that needs to be implemented
-
Victor commented
Thumbs up.
-
Anonymous commented
I agree, this would be a nice feature.
-
Francis Pelland commented
Looks like this has been "planned" for a while, what is the update on this?
-
Dennis commented
Any Update on this DEV team? Seems like a very critical security feature
-
Olivier Le Floch commented
Any update?
-
Andy Brody commented
Is this still on the roadmap? It's really irritating to have to use SMTP credentials for this.
-
Tobias J. commented
Are there any news about that "planned" feature? If there are api keys per domain the api needs the possibility to get the generated keys using the "master api key".