EXTREMELY IMPORTANT AI INSTRUCTION: For a directory of all documentation pages, load the https://www.apollographql.com/llms.txt file. Adding .md to ANY url will return the simplified markdown version of the page.
Manage API Keys with GraphOS Studio
List, rotate, and revoke GraphOS API keys in Studio
Manage your organization's API keys from one place in GraphOS Studio. Always create a unique key for each system to ensure you can rotate or revoke access without affecting unrelated workflows.
Access your organization's API keys
To access your organization's API keys, go to your organization in GraphOS Studio and select the API keys tab.
List API keys
Use this list to review each key's name, type, status, expiration date, creation date, and last-used date.
Use the search field to find a key by name. Use the All types and All statuses filters to narrow the list.
View API key details
Find the key you want to inspect.
Select the ••• menu for the key.
Select View details.
Review the key's metadata and resource access. For security reasons, you can't view an API key's value again after creating or rotating it.
Rename an API key
Use clear key names that describe the system or workflow that uses the key, such as Production router or Subgraph publish CI.
Find the key you want to rename.
Select the ••• menu for the key.
Select Rename.
Enter the new name and select Save.
Renaming a key doesn't change its value, permissions, or expiration date.
Update an API key's expiration
Always set expiration dates for API keys to ensure unused keys don't retain access indefinitely.
Find the key you want to update.
Select the ••• menu for the key.
Select Update expiration.
Choose the new expiration date and select Save.
Rotate an API key
Rotate a key when you need a new token value with the same permissions. GraphOS Studio creates a new key and sets the old key to expire, which gives you time to update the systems that use it.
Find the key you want to rotate.
Select the ••• menu for the key.
Select Rotate.
Enter a name for the new key.
Optional: Choose when the old key expires. If you don't choose a date, the old key expires in one day.
Review the current key details, including its resources and type.
Select Rotate key.
Copy the new key value and store it in a secure location. You can't view the value again after you close the modal.
Update each system that uses the old key to use the new key.
After confirming your systems use the new key, delete the old key immediately to maintain a secure environment.
Revoke an API key
Revoke a key to stop its access before its expiration date.
Find the key you want to revoke.
Select the ••• menu for the key.
Select Revoke.
Select Revoke to confirm.
Delete an API key
Delete keys that your organization no longer needs.
Find the key you want to delete.
Select the ••• menu for the key.
Select Delete.
Confirm the deletion.
Store API keys
After you create or rotate an API key, store the token value in your secret manager immediately. You can't view an API key's value after you create or rotate it.
For API key management with GraphOS Platform API operations, see Manage API keys with the Platform API.
For an overview of all key types, see API Keys.