API keys · Driftstack

Use it now

curl https://api.driftstack.dev/v1/whoami \
  -H "Authorization: Bearer ds_live_<your-key>"

# TypeScript SDK
npm i @driftstack/sdk

Replace ds_live_<your-key> with your key.

Create a new API key

Name

Permissions

account_owner — full access. Manage webhooks, billing and create other keys. Choose this for trusted admin use or your main automation. write — create and control sessions; can't create other keys, manage webhooks or change billing. Best for the code that runs your sessions in production. read — view only; can't change anything. Best for monitoring or read-only tools. granular (advanced) — pick exact permissions for each resource. The least access possible for one job. Pick this for keys that should only touch a specific resource (e.g. monitoring that reads sessions but can't see billing).

Key created — copy it now

This is the only time the full key is shown. Save it somewhere safe, such as a password manager, before dismissing.

API key rotated

Copy the new key now — it won't be shown again. The old key keeps working until the time shown below; update everything that uses it before then, or those requests will be rejected.

Rotated from

New key

Old key valid until

No API keys yet

Create a key to run sessions from your code. Most customers create one key per environment (development, staging, production). Each key has its own permissions and can be revoked on its own, so if one leaks you can revoke it without disturbing the rest.