Skip to main content
API keys let servers and CLIs call the Aria Compute gateway and download authenticated model bundles. This guide walks you through the full lifecycle: create, use, rotate, and revoke.
1

Open the API Keys page

Sign in and open /dashboard/api-keys (or the equivalent on ariacompute.cn).
2

Create a key

Click Create, enter a descriptive name (for example production, ci, or laptop), and submit.
Copy key immediately. It is only returned in this response; the dashboard and future GET /api/api-keys calls show only the prefix.
3

Use the key

Send the full value as a Bearer token to the gateway or download endpoints.
4

List keys

Returns each key’s id, name, prefix, created_at, and last_used_at.
5

Revoke a key

Returns 204 No Content. The key stops working immediately.

​
Rotation

Rotate keys periodically or whenever a key may have been exposed:
  1. Create a new key and store it in your secret manager.
  2. Deploy the new key alongside the old one.
  3. Wait until logs confirm all traffic uses the new key.
  4. DELETE the old key.

​
Per-site keys

API keys are scoped to the site that issued them. If you use both ariacompute.com and ariacompute.cn, create a key in each dashboard and use them against the matching gateway.
Give keys meaningful names. A short prefix plus environment (prod-api, staging-worker) makes revocation obvious.