API Keys Screen
Purpose
Section titled “Purpose”The API keys screen manages credentials for public API integrations.
What You See
Section titled “What You See”- API key table with name, environment, prefix, scopes, status and usage timestamps.
- Security notices for one-time secret display.
- Create/edit forms for scopes and expiration.
- Actions for rotate and revoke.
Available Actions
Section titled “Available Actions”- Create API key.
- Edit API key name, scopes or expiration.
- Rotate a key.
- Revoke a key.
- Copy a newly created secret only at creation time.
Permissions
Section titled “Permissions”This is an owner-only area. API keys are organization-scoped and use scopes, not human roles.
Common States
Section titled “Common States”Never expose API keys in browser code or screenshots. Store server-side secrets outside version control.