Current controls
A configured key can show:- A masked value
- Created date
- Copy
- Rotate Key
- Delete Key
Create and store a key
- Select Create Key.
- Copy the value when it is displayed.
- Store it in an approved secret manager.
- Record the owner and consuming workload.
- Configure the intended CLI, MCP client, CI job, or automation.
- Run a read-only authentication test.
Rotate without downtime
- Inventory every CLI, MCP, CI, and automation consumer.
- Schedule a change window.
- Rotate the key.
- Update every consumer.
- Verify each client.
- Remove old secret copies.
- Confirm that the previous value no longer authenticates.