API keys
An API key lets a script, an agent or CI deploy to an account and call services. It starts with ck_ and is shown once.
Making one
- Your keys are under Settings → API keys, and an org's under its settings → Keys, for its owners.
- A key is
ck_and 64 hex characters. It is shown once, when it is made, and stored only as a hash. - A key made on the website has the
deployscope and no expiry.
What a key does
- A key acts as the person who made it, on the account it was made on.
- With the
deployscope, it deploys and manages that account's services while that person is an owner of it. - It calls the public tools of that account's services, private ones included, and of every public service. A call needs no scope.
- It cannot manage accounts: keys, orgs, members, invites, apps, billing and sessions answer
403.
Your main key
Your account has one main key, shown on the start page. It is the same key each time it is shown. Revoking it makes a new one the next time it is shown.
Revoking
Revoking a key stops it at once. Deleting an org revokes its keys.