API keys

Creating a key

Settings → API Keys → Generate. Name keys after their integration ("Lab notebook script", "Nightly batch job") so they are recognizable in the list. Keys are shown exactly once at creation — store them in a secret manager, never in code or version control.

Using a key

Keys authenticate as your account via the Authorization: Bearer cf_… scheme described in the API reference. They are stored hashed server-side; the platform never stores the key itself.

Revoking

Revoking a key kills it immediately — anything using it stops working at once. Rotate keys when an integration changes hands, and periodically review the list for stale entries.