Settings API Keys

Why it exists

API keys let scripts, agents, and external apps access your Profound CMS data without a browser session.

Use this when

• You need programmatic read access to content, blocks, or schemas
• An integration or agent needs write access (create, update, delete)
• You must revoke a leaked or unused key

What it includes

• Create a named key with Read and/or Write permissions
• One-time full key reveal after creation (copy it immediately)
• List of existing keys with last used and created dates
• Revoke to cut off access immediately

Core workflow

1. Open Settings → API Keys.
2. Enter a name and choose permissions.
3. Create the key and copy the full value once.
4. Store it in your secret manager; you cannot view it again later.
5. Revoke keys you no longer need.

Notes

• Viewers may only create read keys. Write permission is limited by your org role.
• Keep newly created keys safe. The full value is only shown right after creation.