# okibi keys

> Manage your Okibi API keys

Generated from okibi 0.2.4. Every command also accepts `--agent`; see [Agent and CI mode](https://okibi.ai/docs/cli/agent-mode.md).

## okibi keys

Manage your Okibi API keys

```sh
okibi keys [command]
```

## okibi keys create

Mints a new key using this machine's login (run `okibi auth login` first if needed). Scoped to a workspace (--workspace or OKIBI_WORKSPACE, default: this machine's default workspace). The key is LOCKED to that workspace — a CI token can't touch your others. By default the token is printed once to store (e.g. a CI secret); with --use it's stored as THIS machine's credential instead.

```sh
okibi keys create [flags]
```

Flags:

| Flag | Type | Default | Description |
| --- | --- | --- | --- |
| `--api-url` | string | https://okibi.ai | Okibi API base URL |
| `--name` | string |  | label for the key (e.g. "github-actions") |
| `--use` | bool |  | store the new key as this machine's credential instead of printing it |
| `--workspace` | string |  | workspace slug to lock the key to (or OKIBI_WORKSPACE; default: this machine's default workspace, else your first) |

## okibi keys list

List your API keys

```sh
okibi keys list [flags]
```

Flags:

| Flag | Type | Default | Description |
| --- | --- | --- | --- |
| `--api-url` | string | https://okibi.ai | Okibi API base URL |
| `--json` | bool |  | output the raw JSON response |

## okibi keys revoke

Revoke an API key (id from `okibi keys list`)

```sh
okibi keys revoke <key-id> [flags]
```

Flags:

| Flag | Type | Default | Description |
| --- | --- | --- | --- |
| `--api-url` | string | https://okibi.ai | Okibi API base URL |