Skip to main content

​
Why API Keys

Pipelines and scripts authenticate with an API key rather than a person’s account.

​
Creating a Key

Create one under Settings → API Keys. Each key is:
  • Scoped to a project
  • Given an expiry
  • Read-only, if that’s all it needs
The key is shown once, copy it then, because it cannot be retrieved afterwards.

​
Revoking a Key

Revoking a key takes effect immediately.
Give each consumer its own key. One key per pipeline, named for that pipeline. When something needs to be revoked you revoke exactly one thing, and the audit log tells you which automation did what.

​
What’s Next

That covers the full walkthrough, from an empty workspace to a governed codebase. From here, revisit the Introduction for the concepts, or jump back into any step of the workflow.