Create and revoke API keys

Only a Pro or Max workspace owner can create a named API key from workspace settings.

Free workspaces cannot create or use API keys; owners must upgrade before starting this workflow.

The creation response includes the secret once.

Save it in your secret store before leaving the confirmation step because niceuptime stores a digest, not a recoverable copy.

New API keys expire after 90 days by default.

Choose a lifetime from 1 to 365 days, then rotate the key before it expires.

Keys created before expiration was required receive a 90-day expiration from this rollout, so rotate legacy keys before that deadline.

The key list identifies keys by name with a prefix and suffix, plus usage, last-used, and revoked-state details.

Revoke a key when it is no longer needed, after creating its replacement, or after it expires.