Cookie settings
We use essential cookies to keep you signed in and secure, and analytics cookies to improve the product. We never use them for ad tracking.Learn more
Connect
1. One key per agent
Add a new key under "API Keys" in your account page and name it (e.g. claude-desktop, research-bot) so it's easy to identify later.
2. Revoke independently
If a key leaks or is no longer used, revoke that key directly — it won't affect other agents and you never need to rotate your main key.
3. Never paste your main key into a conversation
Conversation logs may be retained; give agents a dedicated sub-key only.
4. Rotate regularly
For high-frequency or public-facing scenarios, rotate the key on a regular schedule.
Capability check: the system already supports multiple named, independently revocable keys per account (key_label / revoked_at / created_by_customer). If your account page hasn't yet enabled "add multiple keys", that's a small remaining prerequisite.