Skip to navigation

API keys

Let a cloud agent or CI act in one project with no browser.

A project API key lets the CLI or an agent act in one project without a browser sign-in. Use it for cloud agents and CI.

Create a key

  1. Open Settings, then API keys in the web app.
  2. Create a key. Give it a name and choose its lifetime.
  3. Copy the key now. TaloTrace shows it once.

A key lasts 90 days by default and at most 365 days. See Limits.

Use a key

Set it in the environment of the process:

export TALOTRACE_API_KEY=<your key>

The CLI reads it instead of a browser sign-in. talotrace setup says that it is in use and does not store it.

Keep it out of files, command lines, logs and commits. In CI, keep it in the secret store of your pipeline.

Rotate and revoke

To rotate, create a new key, put it where the old one was and then revoke the old one. To revoke, open Settings, then API keys and revoke the key. A revoked or expired key is refused with a problem code and a next step.

A key belongs to one project. It cannot reach another project.