Add API key management #3

Open
opened 2026-04-09 20:48:32 +00:00 by sgcommand · 0 comments
Member

Add API key management for server access so administrators can create, rotate, list, and revoke API keys without manual config surgery.

Why

  • Improves security and operational convenience
  • Makes it easier to manage multiple clients/integrations
  • Supports safer key rotation and auditing

Suggested scope

  • Create/generate API keys
  • List existing keys with label/created date/last used date if available
  • Revoke/delete keys
  • Optional labels/description for each key
  • Optional scoped permissions later if not in initial version

Acceptance criteria

  • Admin can create a new API key
  • Admin can view existing keys/metadata without exposing full secrets after creation
  • Admin can revoke a key
  • Revoked keys no longer authenticate
  • Docs cover creation, usage, and rotation
Add API key management for server access so administrators can create, rotate, list, and revoke API keys without manual config surgery. ## Why - Improves security and operational convenience - Makes it easier to manage multiple clients/integrations - Supports safer key rotation and auditing ## Suggested scope - Create/generate API keys - List existing keys with label/created date/last used date if available - Revoke/delete keys - Optional labels/description for each key - Optional scoped permissions later if not in initial version ## Acceptance criteria - Admin can create a new API key - Admin can view existing keys/metadata without exposing full secrets after creation - Admin can revoke a key - Revoked keys no longer authenticate - Docs cover creation, usage, and rotation
Sign in to join this conversation.