Skip to main content

API Keys

API keys authenticate requests to the REST API, CLI, and MCP server. Create separate keys for different tools and AI agents.

Creating an API Key

  1. Go to Settings → API Keys
  2. Click "Create API Key"
  3. Enter a name (e.g., "Claude Code", "CI Pipeline")
  4. Select permissions
  5. Optionally restrict to specific projects
  6. Click "Create"
  7. Copy the key immediately

Important: The API key is only shown once. Save it securely before closing the dialog.

Permission Levels

Permission Capabilities
Read View projects, tasks, knowledge base. Cannot make changes.
Write Read + create and update tasks, add knowledge items.
Admin Write + manage projects, delete items, full access.

Best Practices

One Key Per Agent

Create separate keys for each AI agent or integration:

  • claude-code-personal - Your personal Claude Code
  • cursor-ide - Cursor IDE integration
  • github-actions - CI/CD pipeline

This lets you:

  • Track which agent performed each action
  • Revoke specific access without affecting others
  • Apply different permission levels

Least Privilege

Only grant the permissions needed. A reporting dashboard only needs Read access.

Project Scoping

Restrict keys to specific projects when possible. A key for a client project shouldn't access other projects.

Revoking Keys

  1. Go to Settings → API Keys
  2. Find the key to revoke
  3. Click the ... menu
  4. Select "Revoke"

Revoked keys stop working immediately. Any tools using them will fail to authenticate.

Viewing Activity

Each API key's actions are tracked. View activity by clicking the key name to see:

  • Last used timestamp
  • Total requests
  • Recent actions

Plan Limits

Plan API Keys
Free 1 key
Pro 10 included, then $0.20/key/month

Next Steps