> ## Documentation Index
> Fetch the complete documentation index at: https://evalgate.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Manage API keys

> Create, rotate, and revoke programmatic access.

# Manage API keys

API keys let the SDK, CLI, and your own scripts talk to the EvalGate platform.
They are separate from model provider keys.

## Step 1 — Open API keys

In the sidebar, click **Settings**, then **API keys** (under **History and developer**).

![A screenshot of the API keys list with the Create Key button.](https://mintcdn.com/evalgate/c7l4ztAi8W3wgmvV/help/images/manage-keys-list.png?fit=max\&auto=format\&n=c7l4ztAi8W3wgmvV\&q=85\&s=924f029727a89149f523dbccffee83df)

## Step 2 — Create a key

1. Click **Create Key**.
2. Enter a **Key Name** for where it is used, for example `ci-evalgate-prod`.
3. Pick the scopes it needs. Give the fewest scopes that work.
4. Click **Create Key**, then copy the key **now** — you will not see it again.

> [!WARNING]
>
> Treat an API key like a password. Store it in a secret manager or CI secret,
> never in code. If a key leaks, revoke it immediately.

## Step 3 — Rotate a key

To rotate, create a new key, update your CI or scripts to use it, confirm
everything works, then revoke the old key. Never delete a key you are still
using — revoke it after the new one is live.

## Step 4 — Revoke a key

Click the trash icon next to the key to revoke it. Revocation is immediate. Any request using
that key fails from that moment on, and the revocation is recorded in the audit
trail.

## Up next

[Check feature status](https://evalgate.com/docs/help/settings/feature-status.md) before depending on a
surface in production.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.