API Keys
Reference the organization API key workflow for automation and integration setup.
Use /organization/api-keys when you need a credential for automation, CI, or other service-to-service access.
What An API Key Is
An organization API key is a long-lived credential created by an admin. It is not used directly as a bearer token for the DecisionOps API or MCP endpoints. Instead, it is exchanged for a short-lived OAuth access token through the client-credentials flow.
Create A Key
Give the key a clear name that matches its purpose, then choose the scopes it needs. Naming matters because the inventory page shows who created the key, when it was created, and when it was last used.
Revoke And Rotate
If a key is no longer needed or you suspect it has been exposed, revoke it and replace it with a new one. Do not depend on old copied values lingering in the UI after creation. Treat the initial secret value as something that must be stored immediately and handled like any other production credential.