Coding agent documentation index Fetch the complete documentation index at: https://docs.worklittle.com/docs-agent-manifest.json Use this file to discover all available pages before exploring further.

Share or rotate an API key

Keep keys private, give each system its own key, and replace a key safely.

An API key is like a password for your organization. Share it carefully, and replace it if it might have leaked.

Do not share a key casually

Do not paste a key into chat, email, a shared spreadsheet, or a public GitHub repo. Anyone with the key can act as your organization within what that key is allowed to do.

If a teammate needs access, create a separate key for them or for their system, or have an owner create one and hand it over through a password manager.

One key per place

Name keys after where they are used, for example "Careers site" or "Internal agent". That makes it easier to revoke only the key that was exposed without breaking everything else.

Rotate a key safely

1. Create a new key on API keys. 2. Put the new key into your app or AI tool. 3. Confirm the new key works. 4. Revoke the old key.

Do not revoke the old key first if the system is live, or traffic will fail until the new key is installed.

If a key leaked

Revoke it immediately on API keys, then create a replacement. Check Usage afterward for unexpected activity. See Why is my API key not working? if something still fails.