API key management & permissions

Generate org-scoped API keys with read-only or read-write scopes, rotate keys without downtime, revoke compromised keys instantly, and track usage per key. Keys are hashed at rest (never visible after creation) and rate-limited per key to prevent runaway scripts from melting your account. Critical infrastructure for any developer integration. Built with the same security standards as Stripe, GitHub, and Linear.