Skip to main content

​
Manage API keys

API keys let the SDK, CLI, and your own scripts talk to the EvalGate platform. They are separate from model provider keys.

​
Step 1 — Open API keys

In the sidebar, click Settings, then API keys (under History and developer). A screenshot of the API keys list with the Create Key button.

​
Step 2 — Create a key

  1. Click Create Key.
  2. Enter a Key Name for where it is used, for example ci-evalgate-prod.
  3. Pick the scopes it needs. Give the fewest scopes that work.
  4. Click Create Key, then copy the key now — you will not see it again.
Treat an API key like a password. Store it in a secret manager or CI secret, never in code. If a key leaks, revoke it immediately.

​
Step 3 — Rotate a key

To rotate, create a new key, update your CI or scripts to use it, confirm everything works, then revoke the old key. Never delete a key you are still using — revoke it after the new one is live.

​
Step 4 — Revoke a key

Click the trash icon next to the key to revoke it. Revocation is immediate. Any request using that key fails from that moment on, and the revocation is recorded in the audit trail.

​
Up next

Check feature status before depending on a surface in production.