API Keys

The API Keys tab lists all API keys created for the Agent Identity Security tenant. API keys are used by integrations, and external automation scripts to authenticate with the Agent Identity Security REST API without interactive sign-in. This tab is available to users with the System Admin role only.

API Keys Grid

Column Description
Name A descriptive name for the API key, assigned when the key is created. Supports sorting.
Key Prefix The first few characters of the API key, used to identify a specific key without exposing the full secret value. The full key value is shown only once, immediately after creation.
Scopes The permission scopes granted to the key (for example, scim:read, scim:write, audit_logs:write, agent_discovery:write, policy:read). Multiple scopes are comma-separated.
Last Used The date and time when the key was last used to authenticate an API request. Displays the originating IP address when available. Shows Never used if the key has not yet been used.
Expires The date and time when the key expires and is no longer accepted for authentication. Supports sorting.
Status The current state of the key:
  • Active (green pill): The key is valid and can be used to authenticate.
  • Expired (red pill): The key's expiry date has passed.
  • Revoked (grey pill): The key has been manually revoked and can no longer be used.
Actions Contains a Delete button (trash icon) that permanently revokes and removes the key. A confirmation dialog is displayed before the action is applied.