> ## Documentation Index
> Fetch the complete documentation index at: https://docs.mibyanai.com/llms.txt
> Use this file to discover all available pages before exploring further.

# API keys and service accounts

> Create, restrict, store, rotate, and revoke project credentials

New project keys begin with `mbn_test_` or `mbn_live_`. The full secret is revealed once and is never stored in recoverable form.

## Production checklist

* Create one key per service and environment.
* Grant only the required permissions.
* Restrict models and endpoints when useful.
* Store the key in a server-side secret manager.
* Set an expiry for temporary access.
* Rotate before revoking an active key.

Use a service account when the credential represents an application or automation instead of a human user.