Multiple API Keys With Read, Write, and Admin Roles

A capsule used to have exactly one API key, shared by every client you connected. Now each capsule can hold up to three keys, and you choose what each one can do.

• Pick a role at creation. Read for look-ups only, write to also store and delete memories, or admin for full access. The role is shown next to every key, so it's clear what each client is allowed to do.
• Name each key after the client that will use it, like "Claude Desktop" or "Work laptop".
• Revoke keys individually. The API keys tab lists every key with its name, role, created date, and when it was last used, each with its own delete button — so disconnecting one client leaves the others untouched.
• See it in your audit log. Key creation and deletion now record the key name.

As before, the key itself is shown once at creation and never again. Your existing key keeps working and simply appears as unnamed. All of your keys continue to share a single rate limit.

Need more than three keys, or a higher limit on anything else? Get in touch and we'll sort it out.