An API key is the right credential for automation the whole team relies on, like a CI job that uploads every night. To create one, open Settings, then API keys under team settings, and choose Create API key. Describe what the key is for, pick an expiration date, choose its permissions and which projects it can reach, then generate it. Copy the key straight away: it's shown only once.
A few things are worth knowing about how keys behave:
- A key belongs to the team member who created it, and it's stored only as a hash.
- Its permissions are fixed at creation. What a key can actually do is the overlap between those permissions and what its owner may do, so a key never exceeds its owner.
- Every key has an expiration date.
- Team admins with
apikey:managecan see and revoke every key in the team. Revoking takes effect immediately.
curl -H "Authorization: Bearer $EMBODIFLOW_KEY" https://api.embodiflow.io/v1/projects