Sign in with your key
There is no password, because there is nothing here that a password would guard. The API key is the credential and the session both. No key yet?
Where your key goes. Into this tab's memory, and to
/api/* on this origin — nowhere else, ever. Ticking
keep for this tab mirrors it into sessionStorage so a
reload does not lose it; it still dies with the tab, and any script running on this page
can read it until then. Nothing is written to a cookie or to
localStorage. Sign out wipes memory, storage, and the
screen.
The whole key, starting mend_live_. It is checked for shape here and for authority by the API.
Account
From GET /v1/whoami. The tenant is resolved server-side from the key you presented; this page has no say in it.
Keys
Every key on this tenant, from GET /v1/keys. The key values themselves are not here and never will be — only their ids, labels and lifecycle.
Issue a new key
A new key is shown once, on this page, and then never again. Issuing does not revoke anything — revoke separately when you have replaced the old one everywhere.
Not a secret and not a scope. It exists so that the revoke button, later, is pressed on the right row.
Now use it
What this dashboard is not
- It is not an authority. It renders what /v1/whoami and /v1/keys return for the key you presented. Tenant separation is enforced by the platform, server-side; nothing here is a security boundary, and none of these buttons would be safer if this page checked them twice.
- It cannot show you an existing key. Only newly issued ones, once. There is no "reveal" button anywhere because there is nothing to reveal.
- Revoke is immediate and permanent. Anything using that key stops working at once. There is no undo and no grace period; issue the replacement first.
- No billing, no usage metering, no team management, no audit log view. None of that exists yet, and an empty page for it would be a promise.
- An error here is amber, never red. A refused key or an unreachable API means this page could not learn — it is not a verdict about your account.