hiveguard keys

API key commands require dashboard credentials.

keys list

hiveguard keys list

Output columns: id, label, key_prefix, datasets, created_at.

The full key is never shown after creation — only the prefix (e.g., hg_ab).

keys create

hiveguard keys create LABEL [OPTIONS]

Option	Type	Description
--dataset	UUID	Restrict key to this dataset (repeatable)
--sample-rate	float	Fraction of requests that trigger a challenge (0.0–1.0, default: 1.0)

Example:

hiveguard keys create "production" --dataset DS_ID --sample-rate 0.5

The raw key is displayed exactly once. Save it immediately.

New API key created:
  Label:   production
  Prefix:  hg_ab
  Raw key: hg_abcdef1234567890

⚠  Store this key now — it will not be shown again.

keys revoke

hiveguard keys revoke KEY_ID

Revocation is immediate. All requests using this key will receive 401 from this point forward.