> ## Documentation Index
> Fetch the complete documentation index at: https://docs.projectecho.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Create and manage API keys

> Create permissioned API keys for the Project Echo REST API and MCP.

API keys authenticate the Project Echo REST API and MCP server. Open **API & MCP** in the Workspace nav (top-level item, not under Settings).

## Create a key

1. Open **API & MCP** and stay on the **API** tab.
2. Optionally add a **label** (for example, “Production agent”).
3. Choose a **permission preset** (Read-only, Contributor, Full agent) or select individual permissions.
4. Click **Create API key**.
5. Copy the token immediately — it is shown **once**. Also note the **Key ID**.

Tokens look like `pe_api_…`. Every request needs both the token and the key id.

## Permissions

Keys are scoped. Common areas include requests, comments, votes, members, users (teammates), boards, statuses, and internal notes. Grant the minimum set your integration or agent needs.

## Active keys

The **Active keys** list shows labels, permission counts, and last used time. Use **Revoke** to disable a key you no longer trust or need. Revocation takes effect immediately; create a new key if you must rotate.

## Where keys are used

* **REST API** — `Authorization: Bearer pe_api_…` plus `X-PE-API-Key-Id`
* **MCP** — same key id and token in your MCP client env (see the MCP article)

## Safety checklist

* Store tokens in a secret manager or server env — never in public repos or frontend bundles.
* Prefer separate keys per environment (dev / staging / prod) and per agent.
* Revoke keys when teammates leave or a secret may have leaked.

Base URL for API calls: `https://api.projectecho.io/v1`.

Help: [support@projectecho.io](mailto:support@projectecho.io) · [Help Center](https://docs.projectecho.io/).


## Related topics

- [Use the Project Echo REST API](/api-mcp-and-embed/use-rest-api.md)
- [Security basics for API keys, embed tokens, and webhooks](/api-mcp-and-embed/security-api-keys-tokens-webhooks.md)
- [Connect AI tools with MCP (Claude, Cursor, and others)](/api-mcp-and-embed/connect-mcp.md)
- [Tour of the staff app (Requests, Roadmap, Changelog, Members, Settings)](/getting-started/tour-of-the-staff-app.md)
- [Create and manage boards](/boards-and-prioritization/create-and-manage-boards.md)