# Create and revoke API keys
Source: https://docs.aden.space/docs/help/apps/api-access/create-api-key

Make a key that lets your own software reach one team in Aden, and turn it off the moment you need to.
A key reaches one team: its tracks, albums, playlists, shows, tours, posts, milestones, tasks, contacts and webhooks, and nothing else. On the Lite plan and up.

## Create a key [#create-a-key]

1. Open your team and go to **API** in the sidebar.
2. Click **New key**.
3. Give it a name and pick its access: **Read only** or **Read & write**. A read only key can't change anything, even if it leaks.
4. Click **Create key** and copy it. It is shown only once.

Store the key somewhere safe, like a password manager or your host's secret settings. Never put it in a web page or share it in chat: anyone who sees it can use it. Aden refuses keys sent from a browser for that reason.

The keys table shows each key's access, its requests this month and when it was last used.

**Copy quick start prompt**, on the same page, gives a coding agent everything it needs to start using your key.

## Revoke a key [#revoke-a-key]

On the **API** page, click the trash button next to the key. It stops working at once.

## Found a leaked key? [#found-a-leaked-key]

If you see an Aden key somewhere public, like a code repository or a chat, you can report it from the developer docs, no account needed. The key stops working and its team gets an email with a link to restore it within 24 hours, in case it was a false alarm.

## Related [#related]

* [Send Aden events to other tools](/docs/help/apps/api-access/webhooks)
* [Website Kit](/docs/help/promote/team-website/build-with-ai)
* [Developer docs](/docs/developers)