API keys let scripts, the CLI, and integrations call the REST API without a browser session. Team settings, API keys lists every key in the team, including keys that members created. Keys you created also appear under your personal tokens.
Create a key
- Choose Generate key.
- Enter a description, such as "nightly export".
- Select the permissions the key gets, grouped as Team access, Projects and data, Workflows and algorithms, Training and deployments, and Billing. They are pinned at creation. The key never exceeds what its owner may do: the effective scope is the grant intersected with the member's permissions.
- Choose an expiration date. It is required.
- Copy the key now. It is shown once and cannot be shown again.
Revoke a key
Revoking takes effect immediately: any script, CLI, or integration that uses the key loses access. Team admins can revoke any key in the team.
For one person's own CLI access, a personal access token is usually the better choice. See Authentication.