- Secret keys have full access. Public keys can only create links and are safe in a browser.
- Scope a key to a single domain or team to limit its blast radius.
- The limit is 50 requests per second per key. Use bulk endpoints for large jobs.
- A 429 response includes Retry-After. Respect it rather than retrying immediately.
Find this in your dashboard
- Sign in and select the workspace and domain you want to manage.
- Open API keys. Review the article’s steps and your plan’s available controls.
- Save your changes, reopen the record and verify the saved result. For routing changes, check the short link with a test visit.
