API keys
An API key lets a script or a service act for your organization without a person signing in. Use one in CI, in a deploy job, or anywhere else that can't open a browser.
Find them in Settings, under API keys.
Creating a key
Give the key a name that says where it is used, like github-actions, and optionally an expiry date.
Octri shows the full key when you create it and stores only a hash. Copy it into your secret store right away. Afterwards, the list shows only the key's first characters, which is enough to recognize it.
Keys start with ifk_.
Using a key
The CLI reads a key from OCTRI_API_KEY, which suits CI. To manage keys from a terminal, see API key commands.
See CI setup for a complete pipeline.
An AI assistant can use a key too, with Octri's hosted MCP server at https://mcp.octri.dev/mcp. See AI assistants.
Revoking a key
Revoke a key as soon as it is no longer needed or may have leaked. Anything using it stops working straight away, so put the replacement in place first.
An Octri API key lets something manage your Octri account. It is not the credential your customers use to call your API. For that, see SDK authentication and hosted MCP keys.