API keys
Every key on this account, its state, and where it was last used from.
| Key | Label | State | Created | Expires | Last seen from |
|---|---|---|---|---|---|
| agb_demo…00ab | production this session | active | 38d ago | never | 203.0.113.42 |
| agb_demo…11cd | ci | active | 12d ago | in 9d | 198.51.100.7 |
Manage keys from the API, with any active key
GET /keysEvery key on the account as agb_1234…abcd, with its id. Never the key itself.
POST /keys/generateA new key, shown once, with an optional label and expiry in days. It never outlives the key that made it.
POST /keys/rotateA new key now; the old one keeps working for a grace window, an hour unless you pass grace_minutes (0 for none), then revokes itself.
POST /keys/revokeRevokes the calling key immediately, or another by its key_id or prefix. A revoked key ends this session on its next request.
POST /keys/revoke-allRevokes every key on the account at once, with {"confirm": true}.
Sample keys: neither authenticates anything. A key is shown once, when it is made; here it is only its first and last characters.
Every number on this page is on the API too:
GET /decisions for refusals, /tasks for budgets and /tasks/:task_ref for a job's list-price estimate, /usage?by=event_type for the split by event_type and its estimate, /customers for balances, /keys for keys, each with Authorization: Bearer <your key>.