Skip to main content
Account API keys authenticate programmatic requests to the Guild public API on behalf of your personal account or an organization. Create and manage them from Access & setup > API keys, in either your personal account or an organization. Use the account switcher at the top of the left nav to choose which. See the API reference for the base URL, authentication, the scope model, and every endpoint a key can reach.

​
Create a key

Give the key a name (for example, “Production”), then set permissions for each of six resource groups — Agents, Workspaces, Sessions, Skills, Integrations, and Tool calls — to No access, Read, or Read & write. A key can never reach another account, billing, or credentials, regardless of the permissions you grant it. The full secret is shown exactly once, immediately after creation. Copy it before leaving the page — Guild does not display it again. Use it as the HTTP Basic auth credential (username:password) on API requests.

​
Rotate a key

Rotate a key to replace its secret in place. The key keeps the same ID and permissions, so only the secret changes. Find the key in the list, select Rotate, and confirm.
Rotation replaces the old secret immediately. Any agents or scripts using the old secret lose access instantly until you update them with the newly minted secret.

​
Revoke a key

Revoking a key permanently disables it. Find the key in the list, select Revoke, and confirm — this cannot be undone, and anything still using that key loses access immediately.
Last modified on October 15, 2026