API Keys
API keys authenticate requests to the REST API, CLI, and MCP server. Create separate keys for different tools and AI agents.
Creating an API Key
- Go to Settings → API Keys
- Click "Create API Key"
- Enter a name (e.g., "Claude Code", "CI Pipeline")
- Select permissions
- Optionally restrict to specific projects
- Click "Create"
- Copy the key immediately
Important: The API key is only shown once. Save it securely before closing the dialog.
Permission Levels
| Permission | Capabilities |
|---|---|
| Read | View projects, tasks, knowledge base. Cannot make changes. |
| Write | Read + create and update tasks, add knowledge items. |
| Admin | Write + manage projects, delete items, full access. |
Best Practices
One Key Per Agent
Create separate keys for each AI agent or integration:
claude-code-personal- Your personal Claude Codecursor-ide- Cursor IDE integrationgithub-actions- CI/CD pipeline
This lets you:
- Track which agent performed each action
- Revoke specific access without affecting others
- Apply different permission levels
Least Privilege
Only grant the permissions needed. A reporting dashboard only needs Read access.
Project Scoping
Restrict keys to specific projects when possible. A key for a client project shouldn't access other projects.
Revoking Keys
- Go to Settings → API Keys
- Find the key to revoke
- Click the ... menu
- Select "Revoke"
Revoked keys stop working immediately. Any tools using them will fail to authenticate.
Viewing Activity
Each API key's actions are tracked. View activity by clicking the key name to see:
- Last used timestamp
- Total requests
- Recent actions
Plan Limits
| Plan | API Keys |
|---|---|
| Free | 1 key |
| Pro | 10 included, then $0.20/key/month |