Managing API Keys

Environments

Each key is scoped to an environment:

Both environments have identical functionality. The separation helps you track usage and revoke keys independently.

Creating Keys

1. Navigate to Project Settings → API Keys
2. Click Create Key
3. Choose: name, environment, optional expiration
4. Copy the full key immediately

Rotation Strategy

Recommended approach for zero-downtime key rotation:

1. Create a new key (now you have 2 active)
2. Update your deployment with the new key
3. Verify the new key works
4. Revoke the old key

Revoking Keys

In Project Settings → API Keys, click Revoke on any key. The key becomes invalid within 30 seconds (due to cache TTL).

Per-Environment Usage

# .env.development
NOUKAI_API_KEY=nk_test_Xy34AbCd_devsecret...
 
# .env.production
NOUKAI_API_KEY=nk_live_Ab12CdEf_prodsecret...

Security Checklist

• Keys stored in environment variables, never in code
• .env files added to .gitignore
• Separate test and live keys
• Keys rotated quarterly (or after team member departures)
• Unused keys revoked promptly