Skip to documentation
Design Studio AI
DocumentationAPI keys & access
OPERATE

API keys & access

Create, inject, and revoke credentials for your own workspace.

One key for your agent's workspace.

Create a named key in your signed-in account. Give each agent or environment its own key so you can revoke it independently.

Open API-key management
  1. Open Settings → Agent access and create a key with a recognizable name.
  2. Copy the secret when shown. The list keeps metadata, not retrievable raw keys.
  3. Store it in your agent's secret manager or environment as DESIGN_STUDIO_API_KEY.
  4. Use the key ID to revoke it from Settings, CLI, or REST when access is no longer needed.
Inspect and revoke keysshell
# DESIGN_STUDIO_API_KEY is supplied by your environment.
dsa tokens list
dsa tokens revoke TOKEN_ID

Know which credential you are using

CredentialPurposeManagement
Application API keyAgent access to your studio account and projects.Settings → Agent access; named, hashed at rest, revocable.
Provider BYOK keyAuthorize paid text/image/audio/video calls to your provider.Settings → provider connections; encrypted at rest, masked on reads.
MCP OAuth tokenScoped client authorization to project workflows.OAuth consent/refresh/revocation; cannot manage permanent credentials.
Browser sessionSigned-in human UI and browser WebMCP.HttpOnly cookie; cookie writes check the trusted Origin.