API keys

Create a keyCopy Anchor Link

Open API keys in your Inspect settings and choose Create API key, giving it a descriptive name. Copy the value when it is shown; Inspect does not display the full key again.

Authenticate requestsCopy Anchor Link

Send the key as a bearer token in the Authorization header. Keep it in a secret manager and never expose it in browser code, logs, or source control.

Authorization: Bearer $INSPECT_API_KEY

Rotate and revokeCopy Anchor Link

Create separate keys for separate applications. Revoke keys that are unused, exposed, or owned by someone who no longer maintains the integration.