Skip to main content
Use API keys to authenticate Cogno CLI workers for a workspace. API keys are created in the app, copied once, and revoked from workspace settings.

​
What an API key is for

Current workspace API keys use the worker scope. They are intended for CLI and worker daemon authentication.

​
Create a key

  1. Open the Cogno app.
  2. Select the workspace.
  3. Open Settings > API Keys.
  4. Select Create.
  5. Enter a name, such as MacBook worker or CI worker.
  6. Select Create.
  7. Copy the raw key immediately.
The raw key is shown once. After closing the dialog, Cogno only shows key metadata and a prefix.

​
Use the key with the CLI

Run:
Then open Settings > Workers. The worker should appear after it registers and starts sending heartbeats.

​
Key format and limits

​
Naming keys

Use names that make revocation decisions obvious. Avoid names like test, key, or worker when more than one person operates the workspace.

​
Store the key

Treat the raw key like a password.
  • Store it in a local secret manager, CI secret store, or environment variable.
  • Do not paste it into task comments, docs, chat, tickets, or screenshots.
  • Do not commit it to a repository.
  • Create separate keys for separate machines or services.
  • Revoke temporary keys when the task is complete.

​
Revoke a key

  1. Open Settings > API Keys.
  2. Find the key by name or prefix.
  3. Select the revoke icon.
  4. Confirm Revoke.
Revocation is immediate and irreversible. Workers using that key lose access immediately. Create a replacement key before revoking when continuity matters.

​
Rotate a key

  1. Create a new key.
  2. Copy and install the new key on the worker machine or service.
  3. Restart the worker.
  4. Confirm the worker appears in Settings > Workers.
  5. Revoke the old key.

​
Troubleshooting