> ## Documentation Index
> Fetch the complete documentation index at: https://docs.whop.com/llms.txt
> Use this file to discover all available pages before exploring further.

# API Key

An API Key is a programmatic credential owned by an account or app. Each key carries its own permissions policy — explicit permission statements or an inherited system role — and can be restricted with an expiration date and an IP allowlist.

Use the API Keys API to list a company or app's keys, create a key (the full secret is returned once, on creation), inspect a key's effective grants, update its name or restrictions, rotate its secret, and revoke it. These endpoints require a user session — they cannot be called with an API key.

## Endpoints

| Endpoint                                                          | Request                                                                    |
| ----------------------------------------------------------------- | -------------------------------------------------------------------------- |
| [List API Keys](/api-reference/beta/api-keys/list-api-keys)       | <Badge color="blue" size="sm" stroke>GET</Badge> `/api_keys`               |
| [Retrieve API Key](/api-reference/beta/api-keys/retrieve-api-key) | <Badge color="blue" size="sm" stroke>GET</Badge> `/api_keys/{id}`          |
| [Create API Key](/api-reference/beta/api-keys/create-api-key)     | <Badge color="green" size="sm" stroke>POST</Badge> `/api_keys`             |
| [Update API Key](/api-reference/beta/api-keys/update-api-key)     | <Badge color="orange" size="sm" stroke>PATCH</Badge> `/api_keys/{id}`      |
| [Delete API Key](/api-reference/beta/api-keys/delete-api-key)     | <Badge color="red" size="sm" stroke>DELETE</Badge> `/api_keys/{id}`        |
| [Rotate API Key](/api-reference/beta/api-keys/rotate-api-key)     | <Badge color="green" size="sm" stroke>POST</Badge> `/api_keys/{id}/rotate` |
| [List Permissions](/api-reference/beta/api-keys/list-permissions) | <Badge color="blue" size="sm" stroke>GET</Badge> `/api_keys/permissions`   |