Guides
API keys
Create a project-scoped key for automation, and revoke it any time.
Agents normally sign in with a device code. For automation where nobody can approve a code, owners can create an API key.
Create a key
- Open Settings > Organization > API keys (owners only).
- Choose a name and the project the key belongs to.
- Copy the key. It is shown once and only a hash is stored.
What a key can do
A key works with its own project only and calls the same MCP tools as a signed-in agent. Using it with another project returns a forbidden error.
HTTP header
Authorization: Bearer vf_key_...
Revoke a key
Revoke a key from the same tab. It stops working immediately, and the list shows when it was last used.