Full Answer
Public Key in payload ('token' field) for tracking. Private Key in headers for admin. Different auth patterns.
Public API Key (6-character) for Track/Identify APIs—safe for client-side, included in payload as 'token' field. Private API Key for admin operations (list management, campaigns)—server-side only, passed in Authorization header. Get both from Klaviyo Settings → API Keys.
Public Key in payload ('token' field) for tracking. Private Key in headers for admin. Different auth patterns.