Feature
API keys
Machine principals with read or write scope for scripts, CI and other systems.
Create a key in Settings → Integrations or with POST /api/api-keys. The secret is shown once in the yp_… format and stored only as a hash.
Send it as a bearer token or in the X-API-Key header. The scope gates HTTP methods; the Mode of each row still decides what the key may touch. A key acts with the ci:agent auth role and never becomes the owner of an Agent it registers.
More features
All features →- 01
Six core resources
Services, Agents, Teams, AWS accounts, Azure accounts and Labels, each with full create, read, update and delete.
- 02
Access rules on every row
A chmod-style Mode on every catalog resource: view, edit and delete bits for the owner, the owner group and everyone else.
- 03
Signed webhooks
Outbound HTTPS notices of catalog changes, minimized and signed with HMAC-SHA256.