Skip to main content
API keys authenticate the CLI, the public REST API, the MCP server, the n8n node, and webhooks. These commands let you manage the keys for your current workspace.

settings:api-keys

List all API keys for your workspace. Only metadata is returned (id, name, key prefix, creation date) — the full secret is never shown after creation.
Examples

settings:create-api-key

Create a new API key. The full key is printed once on success and then only metadata (id, name, keyPrefix, createdAt) is shown — it is not stored and cannot be retrieved again.
Examples
Output
The full API key is shown only once, immediately after creation. Copy it somewhere secure (a secret manager or environment variable). If you lose it, revoke the key and create a new one.

settings:revoke-api-key

Revoke an API key by its ID. By default a confirmation prompt is shown; pass -y/--yes to skip it. Once revoked, any client using that key will be rejected.
Examples