Key expiration and rotation

Manage credentials

API Keys in the dashboard supports an optional expiration date in your local time. Expired keys cannot authorize new requests or queued dispatches. Leave the date empty for no expiration.

Rotate replaces a secret immediately. Save the new secret once and update your server configuration. Rotation preserves the key identity, permissions, expiration and monthly development allowance. Requests using the previous secret are rejected. For an overlap period, create a separate key, deploy it, then revoke the previous key.