Chapter · Connect AI agents
Create and replace API keys
Create one key per agent, copy it while it is visible, and replace or revoke it safely if access needs to change.
Before you start
- Choose a clear name for the agent that will use the key.
- Treat a key like a password. Do not put it in screenshots, public messages, or URLs.
1Create a named key
Open Settings › API & agent and create a key. Name it after the agent. Choose Create and cancel for generation, or Status only for monitoring.
2Copy it once
Copy the full key before closing the dialog; you cannot reveal it again. Paste it only into the intended agent’s protected configuration.
http Authorization: Bearer msk_YOUR_KEY3Replace and revoke safely
To rotate a key, create a replacement, update the agent, test access, then revoke the old key. If a key was exposed, revoke it immediately. Revoking a key stops future authenticated access with it.
Check it worked
Each agent has a separately named key with the access it needs, and obsolete keys are revoked.
If it doesn't work
I closed the dialog without copying.
Revoke that key and create another. The app does not reveal the original key again.
Status works but generation fails.
Check the key’s scope. A Status only key cannot create or cancel jobs.