Coding agent documentation index Fetch the complete documentation index at: https://docs.worklittle.com/docs-agent-manifest.json Use this file to discover all available pages before exploring further.

Share or rotate an API key

Keep keys private, use one key per system, and replace a key without downtime.

An API key acts as your organization. Never share it in plain text, and rotate it if it might have leaked.

Share a key

Do not paste a key into chat, email, a shared spreadsheet, or a public GitHub repo. Anyone with the key can act as your organization within the key’s permissions.

If a teammate needs access, create a separate key for them or their system, or have an owner create one and hand it over through a password manager.

Use one key per system

Name keys after where they are used, for example "Careers site" or "Internal agent". Then you can revoke only the exposed key.

Rotate a key

1. Create a new key on API keys. 2. Put the new key into your app or AI tool. 3. Confirm the new key works. 4. Revoke the old key.

Revoking the old key first breaks a live system until the new key is installed.

If a key leaked

1. Revoke it on API keys. 2. Create a replacement. 3. Check Usage for unexpected activity.

If requests still fail, see Why is my API key not working?.