API Keys

Workspace owners can create and manage API keys from user settings under Development.

Usage in the app

The app shows current API-key usage next to each registered workspace key. You do not need to paste the key back into the app to see usage; your signed-in owner session is enough.

Usage in integrations

External integrations should send the API key as the bearer token when calling the REST API.

The usage endpoint only returns data when the request is authenticated as either:

• the signed-in owner of that key
• the same API key named in the request URL

If a key leaks, remove it from the registered workspace list and create a new one.

Related

• OAuth Apps
• Workspace limits