API Keys

Static API keys allow IDE extensions (Cursor), local CLI agents (Claude Code, Codex), and scripts to authenticate against https://api.harness.zuey.me/mcp without an interactive browser OAuth flow.

Key Rules & Limits

• Maximum Active Keys: Up to 10 active keys per operator identity.
• Configurable Lifetime: 1 day to 3,650 days (approximately 10 years).
• One-Time Secret Reveal: Keys are shown only once upon generation.
• Instant Revocation: Revoking a key denies any ongoing or future MCP requests instantly.

Generating a Key

1. Navigate to API Access in the dashboard.
2. Click Create API key (the page's single accented action).
3. Choose a descriptive label (e.g. Cursor Workstation M1) and select an expiration timeframe.
4. Copy the key value immediately (ch_live_...).

The key is shown once, in a dialog, and cannot be recovered. Creation moves into that dialog rather than sitting under the list, and the action is disabled with an explanation when the key limit is reached or the gateway is not ready.