Account API keys authenticate programmatic requests to the Guild public API on behalf of your personal account or an organization. Create and manage them from Settings > API Keys.
Personal accounts see API Keys in the same settings sidebar as Account settings and Profile. Organizations don’t have an Account settings tab — an organization’s settings sidebar covers Profile, Members, Invitations, Credentials, API Keys, LLM Settings, Observability, and Billing instead.
This tab may not appear at all: it’s gated behind a feature flag that needs to be enabled for your account or organization.
Create a key
Give the key a name (for example, “Production”), then set permissions for each of five resource groups — Agents, Workspaces, Sessions, Skills, and Integrations — to No access, Read, or Read & write. A key can never reach another account, billing, or credentials, regardless of the permissions you grant it.
The full secret is shown exactly once, immediately after creation. Copy it before leaving the page — Guild does not display it again. Use it as the HTTP Basic auth credential (username:password) on API requests.
Rotate a key
Rotate a key to replace its secret in place. The key keeps the same ID and permissions, so only the secret changes. Find the key in the list, select Rotate, and confirm.
Rotation replaces the old secret immediately. Any agents or scripts using the old secret lose access instantly until you update them with the newly minted secret.
Revoke a key
Revoking a key permanently disables it. Find the key in the list, select Revoke, and confirm — this cannot be undone, and anything still using that key loses access immediately. 
