API Keys
Create scoped keys, store them safely, and revoke them after suspected exposure.
Create a key
Open Dashboard → API Keys and create the narrowest scope needed. Copy the plaintext value only when it is shown; later screens show metadata rather than the full key.
Use it safely
Authorization: Bearer YOUR_API_KEYKeep the key in a server-side secret store or environment variable. Never embed it in a browser bundle, mobile application, public repository, support ticket, or screenshot.
Rotate and revoke
Create a replacement, update the consuming service, verify requests, then revoke the old key. Revoke immediately if you suspect exposure.
Published · Updated