Topic

4.3 API Keys & Tokens

API Keys and Tokens govern programmatic access to Praisma Hub. They allow external applications and services to authenticate securely while enforcing scopes, expiration policies, and revocation controls.

This layer ensures that machine access follows the same governance principles as human access, supporting secure integration at scale.

Article

4.3.1 Integrations — API Keys & Tokens — Creating Keys — Scopes and Expiration

This section explains how API keys are created and managed, focusing on scope definition, expiration rules, and secure usage without exposing internal authentication mechanisms.

Article

4.3.2 Integrations — API Keys & Tokens — Rotation & Revocation — Best Practices

This section explains how API keys and tokens are rotated and revoked safely, focusing on continuity, risk reduction, and operational best practices without disrupting active integrations.