HTTP API

API keys

Team-scoped secrets for MCP, curl, and CI. Shown once.

Create

POST /api/keys with an optional name. Response includes the secret once. Store it in your password manager or the MCP env. GET /api/keys lists prefixes and names, not secrets.

Revoke

DELETE /api/keys/{id}. Existing dashboard JWTs are unaffected. Rotate keys if a laptop is lost.

Previous Sites NextManifest

Something off? Open an issue · Edit on GitHub