Create and revoke an API key
An API key lets a script or an AI client act as you, with your own permissions and no more; create it in Developers, copy it once and revoke it the moment you are done.
Last updated- Open Settings, then Developers. This is for Owners and Admins.
- In API keys, type a Key name (up to 80 characters) and choose Create key.
- Choose Copy key and store it. You cannot see it again once you close the dialog, including by asking us.
- To retire it, choose Revoke next to the key and confirm. Anything using it stops working immediately.
What a key can and cannot do
A key acts with the role of the member who created it, resolved on every call, so removing or demoting that member limits the key on its very next use. What it creates follows the same validation and approval rules as everything else. The list shows each key's name, the start of its value, who created it and when it was last used, or "never used".
Rotate, revoke, and treat it like a password
Rotate replaces the credential: "The current credential stops working immediately, and you'll see the new one once." Use it when a key might have leaked but the tool should keep working. Anyone holding a key can use it until it is revoked, so create one key per tool, and revoking one then affects only the tool you meant. Creation, rotation and revocation are written to the audit log.
The key is displayed in full only in the dialog that appears when you create or rotate it. If you lose it, create a new one and revoke the old.
If it did not work
If Developers is not in your Settings, your role does not include it. If a tool says the key is rejected, check you pasted the whole value, and check the key still appears in the list. A revoked key never comes back. To use a key with an AI client, see Connect an AI client; the API key guide has the same steps with a result check.