API Keys

API keys are managed entirely from the Developer Portal — there's no API for creating keys with a key (you always start from the dashboard).

What a key carries

  • Name — a friendly label, e.g. "Production Backend".
  • Prefix — the visible, non-secret part (pk_live_...) used to identify the key in lists and logs.
  • Scopes — the specific endpoints it's allowed to call. See Scopes.
  • Expiration — a fixed date, or never.
  • Status — active, revoked, or expired.

Lifecycle

Rename

Change the friendly name at any time — has no effect on the key itself.

Revoke

Immediately and permanently disables the key. Cannot be undone.

Delete

Removes the key from your account entirely.

Expire

Happens automatically at the configured date, if one was set.

Tracking usage

Every key's Last Used timestamp and IP address are recorded, and full usage analytics live under Usage and API Logs in the Developer Portal.