# API Key Management

API keys are a user credential. Manage them at `/api-keys`, linked from `/profile`. The `apiKey` plugin is on by default.

## Creating API Keys

- Custom name
- Shown once at creation — copy it then
- Scoped to an organization via `metadata.organizationId` so the key inherits your role in that tenant
- One organization: stamped automatically
- Several organizations: pick one when creating

## Managing Keys

- List every key you own (not filtered to the current org)
- See last-used timestamp and which organization the key is scoped to
- Revoke individual keys

`/$slug/api-keys` redirects here so old bookmarks still work.

## Related

- [API Keys Auth](/platform/auth/api-keys) — Server-side API key authentication
- [Environment Variables](/ui/account/environment-variables)