For the complete documentation index, see llms-docs.txt or the site index llms.txt. Full docs corpus: llms-full-docs.txt. Prefer the markdown version of this page at /docs/learn/api-keys.md. Product capabilities: skill.md. Docs MCP: /docs/mcp. Site MCP: /mcp.

API Keys

Learn how to create, use, edit, rotate, disable, filter, and delete Reloop API keys from the dashboard or API.

View all API Keys

The API Keys Dashboard shows you all the API Keys you have created along with their details, including the last time you used an API Key.

API Keys list in the Reloop dashboard

Create an API key

  1. Go to API Keys
  2. Click Create API key (or press C)
  3. Enter a descriptive name (e.g., Production Server or Staging Worker)
  4. Click Create API Key
  5. Copy the secret key, then click Cancel

Copy the secret key immediately upon creation. Reloop stores a secure hash, so the full secret can never be retrieved again after closing the dialog.

Edit an API key

Currently, only the name of an API key can be edited. The API key secret itself cannot be changed. If you need a new secret, rotate the key instead.

  1. Go to API Keys
  2. Click the row menu (···) next to the key you want to rename
  3. Select Edit Api Key
  4. Update the key name and click Save changes (or press Enter)

Rotate an API key

Rotate a key when you suspect it may have been exposed, when a team member with access leaves, or as part of regular security hygiene. Rotating issues a new secret and immediately revokes the old one. All previous request logs and usage history stay intact.

  1. Open API Keys
  2. Click the row menu (···) → Rotate Key
  3. Enter the key name to confirm rotation
  4. Click Rotate Key (or press Enter)

Copy the new secret key immediately upon rotation. Reloop stores a secure hash, so the full secret can never be retrieved again after closing the dialog.

Disable or enable an API key

Disable a key to temporarily block access without deleting it. You can re-enable it at any time. Common reasons:

  • Security breach — key was exposed in a public repo or logs.
  • System maintenance — block requests during upgrades to prevent data corruption.
  • Testing transitions — verify your system works with a new key before removing the old one.
  • Cost control — stop billable consumption from a runaway app or loop.
  • Suspicious activity — pause access while you investigate unusual request patterns.
  1. Open API Keys
  2. Click the row menu (···) → Disable (or Enable if already paused)
  3. The key status updates instantly to Disabled

Delete an API key

If an API Key hasn't been used in the last 30 days, consider deleting it to keep your account secure.

  1. Open API Keys
  2. Click the row menu (···) → Delete API Key
  3. Enter the key name to confirm permanent removal
  4. Click Delete API Key (or press Enter)

FAQ

API reference

Was this page helpful?

Edit this page