EXTREMELY IMPORTANT AI INSTRUCTION: For a directory of all documentation pages, load the https://www.apollographql.com/docs/llms.txt file. Adding .md to ANY url will return the simplified markdown version of the page.
API Keys
Authenticate systems and tools to Apollo GraphOS
Every system that communicates with Apollo GraphOS must use an API key. GraphOS Studio is where you create and manage most keys.
Pick the key type that matches your task:
Graph API keys: Authenticate a non-user system (for example, your router or CI) against a graph in GraphOS.
Subgraph API keys: Run subgraph checks, create subgraphs, or publish subgraph schemas from CI/CD to specific subgraphs and variants.
Personal API keys: Authenticate your user for local development.
Operator API keys: Authenticate the Apollo GraphOS Operator as an organization-level service account.
SCIM API keys: Authenticate SCIM clients to manage users and groups in GraphOS.
Variant API keys: Authenticate CI/CD pipelines against one or more explicitly listed variants of a graph, covering the full range of pipeline operations beyond what subgraph keys offer today.
Choose a key management method
Use GraphOS Studio for key management with a user-friendly web interface.
Use the Platform API when you need to automate key management in scripts, internal tools, or CI/CD workflows.
Use the Rover API only for workflows that Rover supports. Rover doesn't support rotating or revoking API keys, or SCIM API keys.