Programmatic API Keys
Scoped, rotatable keys for automation and integrations.
What It Does
Programmatic API Keys let machines use the platform safely. Instead of embedding a person's login in a script, you issue a dedicated key with the scopes the automation should have, and those scopes can never exceed what the key's creator is allowed to do. The same key powers the CI/CD integrations and the MCP server for AI agents. Each key shows when it was last used, so stale keys are easy to spot, and rotation issues a new key while the old one keeps working for a grace window you choose, up to 30 days. This is the foundation for integrating the platform into CI/CD, internal dashboards and any tooling that needs to trigger tests or read results without a browser.
Overview
Generate API keys to drive the platform programmatically: trigger test packs, poll their status, pull results, connect AI agents through the MCP server, and wire the platform into your own tooling. A key's scopes come from the same permission catalogue as roles, and a key can never exceed the permissions of the person who created it. Keys are shown once and stored only as a SHA-256 hash, can carry an expiry, can be revoked instantly, and can be rotated with a grace window of up to 30 days so pipelines switch over without downtime.
Key Capabilities
How It Works
- 1
Create an API key and assign its scopes
- 2
Copy the key once and store it securely in your automation or pipeline
- 3
Call the public REST API to trigger runs and read results
- 4
Check each key’s last-used time, and rotate with a grace window when needed
- 5
Revoke a key immediately if it is no longer needed
Available on
professional Plan & Above
Upgrade to the professional plan to unlock this feature.
Documentation
Step-by-step guides for setting up and using API Keys.
Go deeper
Guides and playbooks that show this capability in practice.
Try API Keys Today
Start your 15-day free trial — no credit card required.