Create an API key
- Go to Settings → Tokens.
- Click Generate New Token.
- Enter a descriptive name (e.g.
prod_pipeline_key). - Optionally set an expiry date and an access scope.
- Click Create and copy the generated key immediately — it will not be shown again.
Use an API key
Include the key as a Bearer token in theAuthorization header of every request:
Manage keys
From Settings → Tokens you can:- Disable a key to immediately invalidate it without deleting it
- Enable a previously disabled key to reactivate it
- Delete a key to permanently revoke access
Security best practices
- Create separate keys for development, staging, and production environments
- Set expiration dates on keys used for temporary access
- Rotate keys periodically
- Revoke any key that is exposed or no longer needed
- Store keys in a secrets manager (e.g. AWS Secrets Manager, HashiCorp Vault) rather than in source code