My App
Guides

Manage API Keys

Create, rotate, and monitor API keys used for HyreLog API access.

Key Concepts

  • API keys are created and rotated in the dashboard.
  • Use least privilege for key scope (workspace vs company).
  • Store keys in your secret manager, never in source control.
  • Create separate keys per environment (dev, staging, prod).
  • Rotate keys on a regular schedule.
  • Replace keys immediately if exposed.

Check Key Status

Use the API to inspect the key making the request:

curl "https://api.hyrelog.com/v1/keys/status" \
  -H "Authorization: Bearer YOUR_API_KEY"

The response includes key metadata such as scope, status, lastUsedAt, and healthScore.

On this page