API Keys
API Key
An API Key is a programmatic credential owned by an account or app. Each key carries its own permissions policy — explicit permission statements or an inherited system role — and can be restricted with an expiration date and an IP allowlist.
Use the API Keys API to list a company or app’s keys, create a key (the full secret is returned once, on creation), inspect a key’s effective grants, update its name or restrictions, rotate its secret, and revoke it. These endpoints require a user session — they cannot be called with an API key.