Skip to main content

Create an API key

Use a REST API key for operations that accept API-key authentication. The list belongs to the signed-in user. Open Settings with a project administrator account.

Generate a key​

  1. Confirm the selected project.
  2. Open Settings → Apps & developers → API & integrations and choose API Keys.
  3. Select Add API Key. Use Copy to store the new value in your secret manager. The list masks the value by default. Use Show only when you need to view it.
API Keys panel in a project with no keys

Keep your key secure​

When replacing a key, update and verify the client with the replacement, then use the old key’s Actions → Delete and confirm. Delete a compromised key as soon as possible. Keep key values in a secret manager.

Use your key​

Use the X-Api-Key header only when the operation supports it. Check the operation’s security requirements in API Reference. MCP keys have their own setup and lifecycle in the Ordering MCP setup guide.