API Key Management
Create and manage API keys through the Account UI interface
API keys are a user credential. Manage them at /api-keys, linked from /profile. The apiKey plugin is on by default.
Creating API Keys
- Custom name
- Shown once at creation — copy it then
- Scoped to an organization via
metadata.organizationIdso the key inherits your role in that tenant - One organization: stamped automatically
- Several organizations: pick one when creating
- Optional Scopes — space-separated
read,write,<resource>:read,<resource>:write. Empty means full access as your role; scopes only narrow it. Unknown scopes are rejected. See Scopes
Managing Keys
- List every key you own (not filtered to the current org)
- See last-used timestamp, which organization the key is scoped to, and its scopes
- Revoke individual keys
/$slug/api-keys redirects here so old bookmarks still work.
Related
- API Keys Auth — Server-side API key authentication
- Environment Variables