Skip to main content
API keys authenticate requests to the Oviond API from external tools, scripts, integrations, and AI connectors. Each key belongs to your account and operates at the permission level you chose when you created it.
Managing API keys requires admin or owner permissions.

​
View your keys

Go to Settings → API keys to see every key on your account. Each row shows:
  • Name and the key prefix (the first characters of the key — the full value is never shown again)
  • Status — Active or Revoked
  • Permission — View, Edit, or Full
  • Created date
  • Last used — when the key last authenticated a request, or Never

​
Manage keys

From the list you can:
  • Create key — generate a new key. See Add API key.
  • Revoke an active key — immediately stops it from authenticating requests. See Revoke API key.
  • Delete a revoked key — permanently removes it from your account. See Delete API key.
The row action changes with the key’s status: active keys offer Revoke, and revoked keys offer Delete. A key must be revoked before it can be deleted.
Revoking is immediate. Update any tools or scripts that use a key before you revoke it to avoid downtime.

​
Security best practices

  • Give each key a descriptive name so you can identify and revoke individual integrations.
  • Use the lowest permission a tool needs — choose View or Edit instead of Full where possible.
  • Never commit API keys to version control.
  • Use one key per integration so you can revoke a single key without affecting others.
  • Rotate keys periodically, or immediately if you suspect a key has been exposed.