API keys
Create, inspect and revoke workspace-scoped secrets.
Scale · Dashboard sessionList keys
GET /api/v1/developer/api-keys
Authorization: Bearer DASHBOARD_SESSION_TOKENReturns { keys: [...] }. Each key includes id, name, key_prefix, created_at, last_used_at and revoked_at. Secrets and hashes are never returned.
Create a key
POST /api/v1/developer/api-keys
Authorization: Bearer DASHBOARD_SESSION_TOKEN
Content-Type: application/json
{ "name": "Production integration" }Use a name between 1 and 80 characters. Save secret from the response immediately; it will not be shown again.
{
"id": "key_example",
"name": "Production integration",
"key_prefix": "pb_live_…",
"secret": "pb_live_YOUR_ONE_TIME_SECRET",
"warning": "Store this secret securely. It will not be shown again."
}Revoke a key
DELETE /api/v1/developer/api-keys/{key_id}
Authorization: Bearer DASHBOARD_SESSION_TOKENReturns { status: 'revoked', id }. Missing or already-revoked keys return 404. Revocation cannot reveal or restore the old secret.