API keys
Create, use, and revoke Foo Guard API keys for personal and Team workspaces.
Personal API keys
1. Upgrade to the Pro plan 2. Open /dashboard/settings 3. Enter a key name and click Create API key 4. Copy the key immediately — it cannot be viewed again
Personal keys use the agt_live_ prefix.
Team service keys
Team organization service keys use the agt_team_ prefix and require an active Team entitlement. Create them from Team settings.
Security
- Keys are stored as SHA-256 hashes (with optional
API_KEY_HASH_PEPPER) - Keys are never logged, stored in analytics, or included in error messages
- Revoke keys from settings or via
DELETE /api/api-keys/{id}
Revocation
Revoked keys return 401 Invalid API key on subsequent API or CLI requests.