Create, scope, restrict, and revoke keys·View as Markdown

API keys

Multiple keys per workspace. UI is only visible when your user/workspace is on the intelligence dogfood allowlist.

Create

Settings → API keys → Create. Choose a preset or custom scopes:

Optional: restrict to specific bucketIds, set expiry.

The secret is shown once. Store it securely; only keyPrefix is listed later.

Scopes

workspaces:read, buckets:read|write|delete, files:read|write|delete|upload|download, intelligence:read|write, agent:run, shares:read|write, transfers:read|write.

Keys cannot escalate past the creating member's workspace permissions.

Use with MCP

{
  "mcpServers": {
    "file-rocks": {
      "url": "https://www.file.rocks/api/mcp",
      "headers": { "Authorization": "Bearer fr_live_..." }
    }
  }
}

Revoke

Settings → API keys → Revoke. Revoked keys fail immediately.