> ## Documentation Index
> Fetch the complete documentation index at: https://docs.qodo.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Manage API keys in the Qodo portal

> Generate and manage private system API keys in the Qodo portal for authenticating requests to Qodo services and integrations.

<div style={{ display: "flex", alignItems: "center", gap: "6px" }}>
  <Badge color="deployment" size="sm" shape="pill">Multi-tenant</Badge>
  <Badge color="deployment" size="sm" shape="pill">Single-tenant</Badge>
</div>

You can generate and manage private system API keys in the Qodo portal. API keys are assigned per user and are used to authenticate requests to Qodo services and integrations, including features like Skills. Administrators generate these keys in the Qodo portal and use them in relevant integrations or API clients.

## API key rules and limitations

* API keys can only be copied during generation. They will not be shown again afterward.
* API keys can be revoked at any time.
* You are responsible for tracking key validity to ensure secure and uninterrupted service.

## Create an API key

1. Log in to the Qodo portal.

2. Navigate to your **Account settings** in the bottom-left corner.

3. Select **API Keys**.\
   The **API Keys** page opens.

4. Click **Create API Key**.

   <div style={{ maxWidth: "50%" }}>
     <Frame>
       <img src="https://mintcdn.com/qodo/wRwvti-Uvgm0Qjta/images/administration/administration-api-key-create-dialog.png?fit=max&auto=format&n=wRwvti-Uvgm0Qjta&q=85&s=3e9242ed1d8fd180951e061c497e898d" alt="API key creation dialog in the Qodo portal" width="1004" height="570" data-path="images/administration/administration-api-key-create-dialog.png" />
     </Frame>
   </div>

5. Under **API Key Name**, enter a descriptive name to help identify it later.\
   The **API Key Created** dialog opens, displaying the API key (masked with asterisks).

6. Copy the API key and store it securely for future use.

7. Click **Done**.\
   The key is now added to the API key list.

## Revoke an API key

Revoking an API key immediately disables all services and integrations using it. Use revocation if a key is compromised, no longer needed, or requires rotation. Once revoked, the API key can no longer be used for authentication.

1. In the **API Keys** table, locate the relevant key.

2. Open the three-dot menu at the end of the row.

   <div style={{ paddingLeft: "0.1rem" }}>
     <Frame>
       <img src="https://mintcdn.com/qodo/wRwvti-Uvgm0Qjta/images/administration/administration-api-keys-revoke-button.png?fit=max&auto=format&n=wRwvti-Uvgm0Qjta&q=85&s=4f13baa46707b4d0397ec0aa8db7e441" alt="API key revoke button in the Qodo portal" width="2488" height="576" data-path="images/administration/administration-api-keys-revoke-button.png" />
     </Frame>
   </div>

3. Click **Revoke**.\
   The **Revoke API Key** dialog opens.

   <div style={{ maxWidth: "50%" }}>
     <Frame>
       <img src="https://mintcdn.com/qodo/wRwvti-Uvgm0Qjta/images/administration/administration-api-keys-revoke-dialog.png?fit=max&auto=format&n=wRwvti-Uvgm0Qjta&q=85&s=b869be05b017acd611205802fc050e2c" alt="Revoke API Key confirmation dialog in the Qodo portal" width="844" height="398" data-path="images/administration/administration-api-keys-revoke-dialog.png" />
     </Frame>
   </div>

4. Click **Revoke**.\
   The API key is removed from the list.