Guides/Authentication & API keys
🔐API Reference

Authentication & API keys

Create, scope, rotate, and revoke Latentface API keys. Best practices for production.

1

Create a key

Dashboard → API Keys → New Key. Name it after the service that will use it (e.g. `production-swap-worker`). You'll only see the secret once.

2

Scope a key

Scoped keys restrict endpoints (`swap:write`, `embed:read`) and set a rate cap below the plan limit. Use scoped keys for any client-facing context.

3

Rotate

Create a new key, deploy it, revoke the old one. Never delete the only working key — keys are not recoverable after revocation.

Tip: Set a calendar reminder to rotate keys every 90 days.
4

Revoke

Dashboard → API Keys → ⋯ → Revoke. Takes effect within 60 seconds globally. Any in-flight calls on the old key get a 401.

Ready to go live?

Start your first Latentface session for free — no credit card required.