Manage API keys
Create, edit, and delete personal and workspace API keys safely.
Manage API keys
API keys let machines call /api/v1 without a browser session. The template separates personal keys
from workspace keys so users can choose the principal intentionally.
Create a personal key
- Open
/user/api-keys. - Choose Create key.
- Enter a name that helps identify the integration.
- Select permission presets, expiration, and rate limit settings.
- Copy the secret when it is shown.
The secret is shown once. Store it in the integration's secret manager before closing the dialog.
Create a workspace key
- Open the workspace settings page.
- Go to API keys.
- Create the key from the workspace-owned surface.
Workspace keys act as one organization. They are visible only when the current member has permission to read or manage workspace API keys.
Edit a key
Editing a key can change its name, permissions, expiration, or rate limit settings. Expiration renewal is explicit so a stale key is not silently extended.
Delete a key
Delete keys that are no longer used. Personal keys are revoked when the owner account is deleted. Workspace keys are revoked when the workspace organization is deleted.