Managing API keys
Manage API keys and monitor usage across your workspace.
API keys allow external tools and automations to interact with your workspace programmatically. Workspace admins can create, view, and revoke keys at any time.
Creating an API key
Go to Settings → API → Keys and click New API key. Give the key a descriptive name (e.g. "CI/CD integration" or "Internal dashboard") so you can identify it later.
Copy your key immediately after creation — it won't be shown again. If you lose it, you'll need to revoke and recreate it.
Key permissions
When creating a key, you can scope its permissions:
Use the minimum permissions necessary for each integration.
To rotate a key, create a new one, update your integration to use it, then revoke the old key. There's no automated rotation — this is a manual process.
Go to Settings → API → Keys, find the key, and click Revoke. Revocation is immediate — any requests using that key will fail instantly.
Under Settings → API → Usage, you can see request counts per key over the past 30 days. This is useful for spotting unexpected usage or identifying which integrations are most active.