Creating an API Key
Generate a key
Click Create Key, give it a descriptive name (e.g.
production, staging), and confirm.Using Your API Key
Include your API key in theAuthorization header as a Bearer token on every request.
Managing Keys
From the API Keys page you can:- Rename a key to keep your list organised
- Revoke a key to immediately disable it — any requests using that key will return
401 Unauthorized
There is no limit on the number of API keys per organisation. Use separate keys for different environments or services so you can revoke them independently.
Security Best Practices
- Never expose API keys in client-side code or public repositories
- Use environment variables or a secrets manager to store keys
- Rotate keys periodically by creating a new key, migrating your services, then revoking the old one
- Use separate keys for production and development