Manage API keys
Set permissions, restrict file access, and rotate a single integration key.
On this page
Create an integration key
Name and place the integration
Open API keys and click Create key. Enter Key name and choose its Upload destination. Create a separate key for each integration so you can change one without replacing the others.Choose its access
Review Restrict file access to this location and the Permissions. Select only what the integration needs. Optionally set Requests per minute. Leaving it empty uses the account default.Create and copy the secret
Click Create key. Copy the new secret immediately into your server’s secret storage. It is shown only briefly; the key list displays a prefix afterward.
Understand location and permissions
The upload destination selects where new uploads go by default. The file restriction determines which files the key can access. New keys for a project start restricted to that project; an unrestricted key can access files across the account.
| Permission | Allows |
|---|---|
| View videos and images | Read files within the key’s permitted locations. |
| Upload, move, and delete files | Change files within the key’s permitted locations. |
| View account usage | Read account-wide usage. |
| Spend money and manage account billing | Perform account-wide billing actions. Enable only when necessary. |
Location restrictions do not narrow usage or billing permissions. Restricted keys cannot create or edit keys, broaden their access or manage account-wide webhooks. They can view and revoke themselves.
Use the key on your server
Send the secret as a bearer token to your API address. Keep it out of browser code, public repositories, embed URLs and screenshots. Playback links use their own viewer tokens; visitors do not need your API key.
curl -sS "https://lanternaut.com/v1/assets?status=ready" -H "Authorization: Bearer $LANTERNAUT_KEY"Your playback domain is https://media.lanternaut.com. Copy the API address and playback domain from the Addresses card on the API keys page. Read the API reference for request definitions and project filters.
Edit, rotate or revoke a key
Open the key’s Manage menu and choose Edit settings, update the destination, restriction, permissions or rate limit, then click Save key settings.
Rotate key replaces that key’s secret while keeping its settings. Copy the replacement and update the affected integration immediately. Other keys keep working. Revoke stops requests using that key.