API Keys
Retrieve API key status and rotate your key.
GET /dashboard/api-key
Returns API key metadata. The full key is never returned — only the masked preview.
Response:
| Field | Description |
|---|---|
hasKey | true if a valid, non-revoked key exists |
maskedKey | Preview for UI display — e.g. liya_F9y-...o4k |
lastUsedAt | Timestamp of the last successful API call |
revokedAt | Non-null if the key was revoked |
POST /dashboard/api-key/rotate
Generates a new API key and immediately invalidates the old one. The full key is returned once — save it.
Response:
After rotation:
- The old key returns
401 INVALID_API_KEYimmediately - All active integrations using the old key will fail until updated
lastUsedAtresets tonullfor the new key