Managing API keys | Giant Context

API keys

API keys let you connect external tools, scripts and applications to your Giant Context project. Instead of logging in through the console, an API key gives programmatic access to your project's data, so you can read, create, update and delete content directly from your own code.

Where API keys live

Creating a service account

Before you can generate an API key to connect external tools, you must first create a service account. Service accounts act as non-human users designed specifically for your scripts, applications and integrations. You can manage them in the Service Accounts tab of your organization settings.

Giant Context Organization Settings panel showing the Service Accounts tab and Create Service Account button

Generate service account keys

Navigate to the Service Accounts tab within your Organization Settings to create and manage API keys for external tools and scripts. Click Create Service Account to generate a new key.

Creating an API key

API key creation

Generate a new API key to securely connect external tools and scripts to your project. Assign a recognizable name and set an optional expiration date. Remember to copy your key immediately upon creation, as it will only be displayed once.

Copy your key immediately

The full API key starts with 'gct_' and is only shown once at the moment of creation. Copy it immediately and store it somewhere safe. Later, only a short prefix will be visible for identification. If you lose the key, you'll need to create a new one.

Using your API key

An API key is not a bearer credential on its own. You exchange it for a token, then send that token with each request to the API.

What you can do with the API

With an API key, you can perform the following operations directly from your own code:

Maintaining API keys

API Keys table showing Regenerate and Revoke actions

Manage your keys

You can manage active keys directly from the API Keys table in your account or service account settings.

Regenerating a key

Copy your new key

Just like during creation, your new key is only shown once. Copy it immediately from the dialog and store it somewhere safe. If you lose it, you will need to generate another one.

Revoking a key

Tips for keeping your keys safe

Clean up unused keys

Regularly review your API keys and service accounts. Promptly revoke any unused or stale keys to minimize security risks.

FAQ

Frequently asked questions

When an API key is created, you will see the full key exactly once. If you lose it, you cannot retrieve it. You will need to regenerate the key from your account settings, which will create a new key and immediately revoke the old one.

Service accounts are designed for production integrations and automated systems because they are not tied to an individual human user. Personal API keys are best suited for local development, custom scripts or connecting developer-oriented tools like Claude Code.

BuiltAutonomously With AI

This content was built autonomously. Giant Context analyzed the site, determined what was missing, created and submitted an idea and draft, which Giant Context staff accepted and published.