---
title: API keys
description: >-
  Learn how API keys authenticate external apps with Kapptivate, letting admins
  create, scope, manage, and revoke tokens for teams.
sidebarTitle: Overview
lastUpdated: "2026-09-23"
---

> **For AI agents:** the complete documentation index is at [llms.txt](/llms.txt). Append `.md` to any page URL for its markdown version.

API keys authenticate external applications and integrations, such as CI/CD pipelines and third-party services, with your Kapptivate workspace. Each key is scoped to specific teams and generates a token for authentication.

![The API keys list with the Token and Access columns](/images/api-keys-list.webp)

<Info>
Only workspace administrators can create, edit, and revoke API keys.
</Info>

<Warning>
Treat API keys like passwords and keep them secret. Use them as environment variables instead of hardcoding them into your programs.
</Warning>

## What you can do

- [**Create an API key**](/administration/api-keys/create): generate a new key, assign it to teams, and copy the authentication token.
- [**View and manage API keys**](/administration/api-keys/manage): search, edit, refresh tokens, and revoke keys across your workspace.

For managing the users and teams that API keys are scoped to, see [users](/administration/users) and [teams](/administration/teams). To enforce authentication rules for your workspace, see [security policies](/administration/security-policies).

## Use your key

An API key is the credential for everything that talks to Kapptivate from outside the app:

<Columns cols={2}>
  <Card title="CLI" icon="terminal" href="/cli/installation">

    Install ktm and authenticate it with your key to script the platform from a terminal or CI

</Card>
  <Card title="MCP server" icon="robot" href="/mcp/connect">

    Connect Claude, Cursor, or Copilot to Kapptivate with your key

</Card>
</Columns>