> ## Documentation Index
> Fetch the complete documentation index at: https://docs.pictify.io/llms.txt
> Use this file to discover all available pages before exploring further.

# API Keys

> Create, copy, rotate and revoke API keys in the dashboard

# API Keys

API keys authenticate your applications, agents and automations with the Pictify API. They live on the **Settings** page of the dashboard: [pictify.io/dashboard/api-token](https://pictify.io/dashboard/api-token).

## Creating a Key

1. Open **Settings** in the dashboard rail
2. Click **New key**
3. Copy the key with the **Copy** button

New keys start with `pic_live_` followed by 64 hex characters. The list shows each key masked (`pic_live_…3f2a9`); the copy button always copies the full value, so you can come back for it later.

<Warning>
  A key gives full access to your account. Keep it server-side and out of client-side code, mobile apps and public repositories.
</Warning>

## What the List Shows

| Column | Description |
| - | - |
| **Key** | Masked value with a copy button |
| **Created** | When the key was created |
| **Last used** | When the API was last called from this account. This is account-wide, not per key |

## Rotating a Key

**Rotate** creates a replacement key and then revokes the old one. The old key stops working immediately, so anything still calling with it — your code, agents, automations — fails until you paste in the new one. If the replacement cannot be created, the old key is left active.

## Revoking a Key

**Revoke** invalidates a key immediately and permanently. Create a new key first if something still depends on it.

## Older Keys

Keys created before September 2026 are bare 64-character hex strings without the `pic_live_` prefix. They keep working and do not need to be rotated.

## Teams

Teams are optional. On a solo account the keys are yours. On a team account, keys belong to the team and every member uses the same keys.

## Troubleshooting

**"Invalid API Key"** — check for extra whitespace or quotes, make sure the `pic_live_` prefix was copied too, and confirm the key has not been revoked.

**Key missing from the list** — revoked keys are removed from the list. Create a new one.

See [API Key Security](/security/api-keys) for storage and rotation practices.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.