# Key Management

This API allows you to list, create, update, and delete API Keys for a Team.


Learn more about [API keys here](https://docs.honeycomb.io/configure/environments/manage-api-keys/).



## List all API Keys

 - [GET /2/teams/{teamSlug}/api-keys](https://api-docs.honeycomb.io/api/key-management/listapikeys.md): List all API Keys for a Team.

## Create an API Key

 - [POST /2/teams/{teamSlug}/api-keys](https://api-docs.honeycomb.io/api/key-management/createapikey.md): This creates an API Key, which will return the API Key components in the response. The Key ID will be found at data.id and
the Key Secret will be found at data.attributes.secret. For security reasons the Key Secret will only be available during creation so make sure to save it.

To use a newly-created Ingest Key it should be passed in the X-Honeycomb-Team header with the API Key's ID and secret
concatenated (and with no separator). For example, X-Honeycomb-Team: hcxik_1234567890123456789012345612345678901234567890123456789012

Check out our best practices for API Keys.

## Get an API Key

 - [GET /2/teams/{teamSlug}/api-keys/{ID}](https://api-docs.honeycomb.io/api/key-management/getapikey.md): Fetches an environment API Key, either a key of type ingest or type configuration based on the
ID given.

## Update an API Key

 - [PATCH /2/teams/{teamSlug}/api-keys/{ID}](https://api-docs.honeycomb.io/api/key-management/updateapikey.md): Updates an API Key. The expected attributes depend on the key type:
- Ingest Keys (prefix hcxik_): Support name and enabled attributes
- Configuration Keys (prefix hcxlk_): Support name, enabled, and permissions attributes

## Delete an API Key

 - [DELETE /2/teams/{teamSlug}/api-keys/{ID}](https://api-docs.honeycomb.io/api/key-management/deleteapikey.md): This deletes and immediately deactivates the API Key. This is an irreversible operation.