API keys

Create, use, and revoke Foo Guard API keys for personal and Team workspaces.

Personal API keys

1. Upgrade to the Pro plan 2. Open /dashboard/settings 3. Enter a key name and click Create API key 4. Copy the key immediately — it cannot be viewed again

Personal keys use the agt_live_ prefix.

Team service keys

Team organization service keys use the agt_team_ prefix and require an active Team entitlement. Create them from Team settings.

Security

  • Keys are stored as SHA-256 hashes (with optional API_KEY_HASH_PEPPER)
  • Keys are never logged, stored in analytics, or included in error messages
  • Revoke keys from settings or via DELETE /api/api-keys/{id}

Revocation

Revoked keys return 401 Invalid API key on subsequent API or CLI requests.

Related pages