API Keys
Create, store, and revoke project-bound credentials.
| Method | Path | Auth | Purpose |
|---|---|---|---|
POST | /api-keys | Dashboard JWT + X-Project-Id | Create a key pair |
GET | /api-keys | Dashboard JWT + X-Project-Id | List key metadata, never secrets |
DELETE | /api-keys/:id | Dashboard JWT + X-Project-Id | Revoke a key |
Creation returns a pk_live_... public identifier and an sk_live_... secret once. The current /v1/invoices API accepts only the secret key and provides project-level access; no finer named scopes are exposed.
To rotate safely, create and deploy a new key, verify traffic, then revoke the old key. Revocation is immediate for new authentication attempts.