> ## Documentation Index
> Fetch the complete documentation index at: https://docs.corsair.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Get Credentials

> Step-by-step instructions for obtaining a Cal.com API key for the Corsair Cal plugin.

This guide walks you through obtaining all required credentials for the Cal.com (`cal`) plugin.

## Authentication Method

The Cal plugin uses API key authentication.

* **[`api_key`](/concepts/api-key)** (default) — Cal.com API key for server-to-server access

## API Key

### Step 1: Create an API Key in Cal.com

1. Log in to [Cal.com](https://cal.com).
2. Open **Settings** → **Developer** → **API keys** (wording may appear as **Developer** or **API** depending on your Cal.com version).
3. Click to create a new API key.
4. Give it a label (for example, `Corsair`) and confirm any scope or permission prompts.
5. Copy the key when it is shown — you typically cannot view it again after creation.

**Storing credentials:**

```bash theme={null}
pnpm corsair setup --plugin=cal api_key=your-cal-api-key
```

Verify:

```bash theme={null}
pnpm corsair auth --plugin=cal --credentials
```

## Webhooks (Optional)

If you use Cal.com webhooks, configure the signing or verification secret Cal provides for your webhook endpoint and store it as `webhook_signature` if your deployment verifies incoming requests with the value Corsair reads from the key store.

```bash theme={null}
pnpm corsair setup --plugin=cal webhook_signature=your-webhook-secret
```

## Required Credentials Summary

| Credential     | Required for                        | Where to find                             |
| -------------- | ----------------------------------- | ----------------------------------------- |
| API key        | [`api_key`](/concepts/api-key) auth | Cal.com → Settings → Developer → API keys |
| Webhook secret | Webhooks (if used)                  | Cal.com webhook / app settings            |

For general information about how Corsair handles authentication, see [Authentication](/concepts/auth).
