The vScan Settings page.

API configuration card

Navigate to vScan → Settings in your WordPress admin to open the Settings page.

The page shows a single API configuration card. When no API key is saved, it displays two fields:

• API Key — paste your 64-character hexadecimal key here.
• API Base URL — the endpoint URL from the email that contained your API key.

Click Connect to save the key and trigger an immediate validation check. vScan contacts the AskarLabs API to confirm the key is valid and that the domain is not already bound to a different key.

Domain binding: The first time you save your key it is permanently locked to this site’s domain. Use your production domain, not a staging or local environment.

Connected state

Once the key is validated, the card switches to the Connected state and shows:

• A green Connected badge
• “Key validated · 64 chars” confirmation text
• The bound domain name
• The plan tier associated with the key (Free or Premium)

In the connected state, you cannot edit the API key or base URL fields directly. To change the key, you must disconnect first (see below).

Disconnecting

Click Disconnect in the connected card to remove the saved API key from the database. This does not invalidate the key itself — it only removes it from this WordPress installation.

After disconnecting you can enter a new key, or re-enter the same key to reconnect. Note that domain binding is permanent — if the key was previously bound to this domain, it will still work. If it was bound to a different domain, validation will fail.

Disconnecting does not affect your scan history. Scan results remain in the database unless you uninstall the plugin.