API Access Keys
Access keys authenticate external systems calling your organization's prompt and Task API endpoints. When an entry point is set to require a key, calls without a valid one fail.
There are two places to manage keys:
- Org Settings → Access Keys — every key in the organization. Each row shows the key's name, when it was created, and its owner.
- User Settings → Access Keys — only your own personal keys. See User Settings.
Generating a key
- Click Generate Key.
- Enter a name that describes where the key will be used.
- Click Create Key.
The secret is shown once, right after creation. Copy it and store it somewhere safe — you won't be able to see it again. Confirm you've copied it to dismiss the notice.
A key is created with a name only. Whether a given prompt or Task requires a key is set when its API entry point is configured, not on the key itself.
Revoking a key
Click Revoke on a key's row and confirm your identity. The key stops working immediately, and any system still using it gets authentication errors until you issue a new one. Revoke a key when it may have been exposed, when an integration is retired, or when someone with access leaves.