# Create, replace, disable, or delete an API key

API keys authenticate integrations. Your account access key signs you into the website. Keep both private, and do not substitute one for the other.

## Create and save a key

1. Sign into the workspace and open [API keys](https://retrostress.net/api-keys).
2. Select **Create API key** and enter a recognizable name for the integration.
3. Choose an expiration if needed, then create the key.
4. Copy the full key into your integration's secret storage before dismissing the confirmation.

The full API key is shown only when it is created. Later, the list shows a masked prefix. If copying fails, save the key securely while the reveal is still open. Do not paste it into a support ticket to check it.

## I lost the full API key

The masked list is not a way to recover the full value. Create a replacement key, update the integration's secret, and disable or delete the old key when it is no longer needed. Coordinate changes with anyone who uses that integration.

## Disable or delete a key

Select **Disable** beside a key to turn it off. A disabled key can be enabled again. Expand a key's details to find **Delete key**, then confirm deletion if you intend to remove it.

If a key was exposed, disable or delete it promptly and replace it in affected integrations. Do not re-enable an exposed key just to restore access.

## My integration says the key is invalid

Check the key's status and expiration in the workspace, then check that your active plan includes API access. A key can be listed as Active while its expiration or your plan still prevents API authentication.

If the issue persists, contact support with the key's label or masked prefix, the approximate time, and the error message. Remove full keys, authorization headers, and cookies from diagnostic output. This article covers credential management; endpoint contracts belong in the API reference.