# API Keys

[View original](https://ittybit.com/docs/keys)

***

title: API Keys
icon: keys/yellow
-----------------

## Introduction

API keys are used to authenticate requests to the API. They are a way to identify the user and project making the request.

<Tabs groupId="language" items={["typescript", "python", "ruby", "php", "go", "fetch", "curl" ]} persist>
  <Tab value="typescript">
    ```ts
    import { Ittybit } from '@ittybit/sdk'

    const ittybit = new Ittybit({
      apiKey: 'ITTYBIT_API_KEY'
    })

    const files = await ittybit.files.list()
    ```
  </Tab>

  <Tab value="python">
    ```python
    import ittybit

    files = ittybit.files.list()
    ```
  </Tab>

  <Tab value="ruby">
    ```ruby
    require 'ittybit'

    files = Ittybit::Files.list()
    ```
  </Tab>

  <Tab value="php">
    ```php
    use Ittybit\IttybitClient;

    $client = new IttybitClient(
        token: "ITTYBIT_API_KEY"
    );

    $files = $client->files->list();
    ```
  </Tab>

  <Tab value="go">
    ```go
    package main

    import (
    	"context"
    	"github.com/ittybit/sdk-go/client"
    	"github.com/ittybit/sdk-go/option"
    )

    func main() {
    	c := client.NewClient(
    		option.WithToken("ITTYBIT_API_KEY"),
    	)
    	
    	files, err := c.Files.List(
    		context.Background(),
    		&client.FileListParams{},
    	)
    	if err != nil {
    		// Handle error
    		return
    	}
    	
    	// Use the files
    	_ = files
    }
    ```
  </Tab>

  <Tab value="fetch">
    ```js
    const response = await fetch('https://api.ittybit.com/files', {
      headers: { 'Authorization': 'Bearer ITTYBIT_API_KEY' }
    })

    const { data: files, error } = await response.json()
    ```
  </Tab>

  <Tab value="curl">
    ```bash
    curl https://api.ittybit.com/files \
    -H "Authorization: Bearer ITTYBIT_API_KEY"
    ```
  </Tab>
</Tabs>

Keys give access to all the resources for the project so you should not share them with anyone.

<Callout type="warning">
  <Icon icon="warning" />

  You should store your API keys in a secure environment, such as a secret manager or environment variable, and never include them in source controlled files.
</Callout>

## Create an API Key

When you first create a project, you will be asked to create an API key.

![Project Creation](https://webapp.ittybit.net/Screenshot%202025-06-20%20at%2015.11.56.png)

Click 'Generate Key'.

Then you will be able to copy the key to your clipboard.

![copy to clipboard](https://webapp.ittybit.net/Screenshot%202025-06-20%20at%2015.12.17.png)

## View your API keys

### Project Dashboard

Whenever you need to grab your API key, you can do so from the 'Quick Start' section of the project dashboard.

![Project Dashboard](https://webapp.ittybit.net/Screenshot%202025-06-20%20at%2015.01.39.png)

### Project Settings

You can also view and manage your keys from your project settings page.

1. Settings is accessible from the sidebar menu.

![Menu](https://webapp.ittybit.net/Screenshot%202025-06-20%20at%2015.37.53.png)

2. Clicking the 'Manage' button above your key on the project dashboard will also bring you to the project settings page.

Scroll down to the 'API Keys' section.

![Settings](https://webapp.ittybit.net/Screenshot%202025-06-20%20at%2015.38.21.png)

## Pause API Key

You can pause an API key to stop it from being used, but retain the option to re-enable it.

This is useful if you need to test changes in your system without causing side effects, or to prevent runaway costs during an unexpected busy period.

![Pause](https://webapp.ittybit.net/Screenshot%202025-06-20%20at%2015.41.23.png)

You can also re-enable a paused key.

![Re-enable](https://webapp.ittybit.net/Screenshot%202025-06-20%20at%2015.44.21.png)

## Delete API Key

You can delete an API key to remove it from the project. This will immediately stop all requests using the key.

![Delete](https://webapp.ittybit.net/Screenshot%202025-06-20%20at%2015.41.33.png)

Deleting a key is irreversible so you will be shown a confirmation dialog before the key is permanently deleted.

## Roll API Keys

If you need to rotate (aka roll) a project's API key, you can do so without downtime by:

1. Clicking the '+ Create Key' button in project settings.

2. Updating your code to use the new key.

3. Deleting the old key.