API keys & security

How site API keys work, creating a new one, and what to do if one leaks.

• How API keys work: Keys start with rblr_, are shown once, and authenticate supported integrations for your own site. Learn their scope and how to rotate them.
• Rotate a key: Create a new key for a site in Settings and confirm. The old key stops working right away, so add the new key to your integration straight after.
• What to do if a key leaks: Rotate immediately, then know the blast radius: a leaked key can access supported integrations for its site.