Skip to main content
Manage API keys from the command line. Create keys for CI/CD pipelines, service integrations, and team members.

​
Commands

CommandDescription
devhelm api-keys listList all API keys
devhelm api-keys get <id>Get API key details
devhelm api-keys createCreate a new API key
devhelm api-keys delete <id>Delete an API key
devhelm api-keys revoke <id>Revoke an API key

​
api-keys list

devhelm api-keys list
Lists all API keys with their names, full key values, creation dates, and last-used timestamps.
list and get return the full dh_live_* key value, not a masked prefix. Treat the output as sensitive — don’t paste it into logs or CI output.
API key IDs are numeric (e.g. 42), unlike most other resources which use UUIDs.

​
api-keys get

devhelm api-keys get 42

​
api-keys create

devhelm api-keys create --name "CI Pipeline"
FlagTypeRequiredDescription
--namestringYesKey display name
--expires-atstring—Expiration timestamp in ISO 8601 format
Create a key with an expiration date: 
devhelm api-keys create \
  --name "Contractor access" \
  --expires-at "2026-09-01T00:00:00Z"
The create response includes the full key value — copy it into your secret store right away.

​
api-keys delete

Permanently delete an API key. Prompts for confirmation; pass --yes (-y) in scripts and CI. 
devhelm api-keys delete 42

​
api-keys revoke

Revoke an API key. The key remains visible in the list but can no longer authenticate. 
devhelm api-keys revoke 42

​
Next steps

Authentication

Token resolution order and saved contexts.

Authentication reference

API token formats and security best practices.