Skip to main content
API keys live under Settings → Account → API keys. A key is scoped the same way a member is: what it may do, and which properties it may do it in.

​
Creating and revoking

Give a key a name that says where it is used, so the list stays readable when there are several. Revoking is immediate.
Copy a key when it is created. Keys are shown once, and a lost key has to be revoked and replaced rather than recovered.

​
Scope them narrowly

A key scoped to one property and one kind of access limits what a leak costs you. There is no benefit to a broader key than the job needs.

Members and roles

The same permission model, for people.