API keys

Created by a person, shown once, and unable to create another.

Keys belong to an account and are created in the Console. The plaintext secret is returned exactly once, in the response to the request that created it.

A key cannot mint a key

Key management is session-only, enforced at the door. A leaked key therefore cannot bootstrap a stronger one — which is also why there is no programmatic way to complete a first integration without a human sign-in.

Clients