Skip to main content
An API Key is a programmatic credential owned by an account or app. Each key carries its own permissions policy — explicit permission statements or an inherited system role — and can be restricted with an expiration date and an IP allowlist. Use the API Keys API to list an account or app’s keys, create a key (the full secret is returned once, on creation), inspect a key’s effective grants, update its name or restrictions, rotate its secret, and revoke it. These endpoints require a user session — they cannot be called with an API key.

​
Version pinning

Each API key stores an api_version_date. Requests authenticated with the key use that version when they omit the Api-Version-Date header. An explicit header takes precedence. New keys default to the latest released version, while legacy keys without a stored pin use 2025-01-01.

​
Endpoints