Safety and governance
API key
What is api key?
An API key is a credential identifying a caller to an API. Good practice is one key per application with only the permissions that application needs, so a leaked key can be revoked without disrupting anything else.
Scoping matters more than rotation schedules. A key that can only read datasets is a limited problem if it leaks; a key that can create deployments and change billing is not.
Keys should be revocable individually and their last use should be visible, so an unused key can be retired with confidence rather than left in place out of uncertainty.
Related terms
Start with the free tier
A magic link creates your account, your tenant and your first API key. No card until you ask for compute.