Skip to main content
This page covers the dashboard UI for Management API keys. For the underlying wire format, see the technical reference pages: Create an API token, Remove an API token, and the usage endpoints.

​
Where to find it

API keys live at /api/keys, under Developer → API in the sidebar. This is the same page whether you have zero keys or several — an empty account sees an explainer instead of a bare table:
API Keys page showing the header 'API Keys' with a Generate API Key button, a note reading 'You can create upto 1 API keys', and an empty-state panel titled 'Run Scanova from your own systems' with three benefit cards (Full programmatic control, Integrate with your own systems, Automate at scale) and a Generate API Key button

API Keys page, verified live on an account with no keys yet — note the plan's quota note directly under the page header

Access to this page is gated by two things: a permission (view or manage) and a plan quota (MANAGEMENT_API). If your plan doesn’t grant that quota, you won’t see this page at all — contact support if you expect Management API access on your plan.

​
Generating a key

Select Generate API Key (in the header, or the empty-state’s own button) to open the creation drawer:
Create API Key drawer with a Name text field (0/100 characters) and an Expiration dropdown set to 'in 1 Month', with Cancel and Create buttons

The Create API Key drawer, verified live

Selecting Create immediately shows the raw key value in a one-time dialog:
The created-key dialog reads “Copy your API key now. You won’t be able to see it again.” Copy it immediately — this documentation project did not publish a screenshot of that dialog, since it necessarily displays a real, live, copyable secret.
If you choose Never for expiration, the dialog shows an additional amber warning that a key set to never expire should be treated with extra care, since it won’t rotate on its own.

​
Managing existing keys

The table lists every key on the account: Name, a masked API Key value with a copy-to-clipboard icon, Created On, Created By, and Expires On (or “Never”). An expired key’s date is shown in red.
This account’s plan only allows 1 API key at a time — the note directly under the page header (“You can create upto {limit} API keys”) reflects your specific plan’s quota, not a platform-wide limit. If you’re on an unlimited plan, that note doesn’t appear at all.

​
Revoking a key

Select the trash icon at the end of a key’s row to open a confirmation drawer showing the key’s name, its masked value, its Active/Expired badge, and creation date. Confirming revokes it immediately and permanently — matching the remove endpoint’s behavior exactly: there’s no “pause” state, and any request already in flight with that key starts failing right away.