# `bird api-keys`

## Usage

```bash
bird api-keys
```

## Description

A key's token is returned once, at creation, and never again; nothing reads it back
afterwards. Scopes are limited to the data plane, so no key can issue another one, which
is why issuing takes a logged-in session or a token granted `api_keys:write`. Listing,
rotating, and revoking a key are dashboard-only.

Mutations take flags and/or a --body-file JSON body (flags overriding); run --example to print the body shape or --dry-run to preview the request.

## Commands

| Name                                            | Description       |
| ----------------------------------------------- | ----------------- |
| [`create`](/docs/cli/reference/api-keys-create) | Create an API key |