Creating and managing API keys

API keys authenticate you when you interact with the Seek API. Anything that talks to Insight Cloud on your behalf — most commonly SBT — needs a valid key to identify who is making the request.

The most common reason to create a key is publishing apps with SBT. You can create as many keys as you need, and revoke any of them at any time.

Create an API key

1. Click your profile in the bottom-left corner, then click Settings.

2. Go to API keys.

3. Enter a name for your key, then click Create new API key.

Give each key a name that describes where it will be used, for example sbt-local or ci-publishing. Names make it much easier to tell keys apart later, especially when you need to revoke one.

Copy and store your key

Once the key is created, click the copy icon next to it to copy it to your clipboard.

Your key is only visible at this moment. As soon as you leave the page, the full key can't be retrieved again — Insight Cloud doesn't store a readable copy. Paste it straight into wherever you need it, or into a password manager or secrets store, before you navigate away.

If you lose a key, you can't recover it. Revoke it and create a new one instead.

Revoke an API key

1. Go to Settings > API keys.

2. Find the key you want to remove and click Revoke.

Revoking takes effect immediately. Any request using that key will start failing, so make sure nothing you rely on is still using it before you revoke.

Revoke a key if it's been shared, committed to a repository, or is simply no longer in use. Because keys are independent of one another, revoking one has no effect on the others.

Good practice

• Use a separate key for each tool, machine, or environment. If one is compromised, you only have to replace that one.

• Never commit keys to source control or paste them into shared documents or chat.

• Revoke keys you're no longer using rather than leaving them active.