> For the complete documentation index, see [llms.txt](https://docs.radar.citadel-ai.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.radar.citadel-ai.com/en/developer-guide/api-keys.md).

# Issue and Manage API Keys

API keys are authentication information used when applications use the Citadel Radar API.

{% hint style="success" %}
In Citadel Radar, API keys are issued per application. Separating API keys by application makes it easier to manage which application is sending logs, and lets you limit the impact scope when disabling keys that are no longer needed or updating keys.
{% endhint %}

For API specifications, see the [API endpoints](/en/developer-guide/api-endpoints.md) page.

### Before issuing an API key

API keys are issued for registered applications.

If you have not registered the target application yet, first see [Register a New Application](/en/application-owner-guide/new-application.md).

API keys are also used when sending input and output logs from the application to Citadel Radar. After issuance, configure them in a safe location such as application-side environment variables or a secret management tool.

### Issue an API key

From the Nodes screen, select the target application and go to the application settings screen.

After navigating, select `Open settings` on the API key card.

<figure><img src="/files/gU3j3DC6dN7F8GjF2LCZ" alt="" width="563"><figcaption></figcaption></figure>

To create a new API key, select `Create new key` in the lower right of the screen.

After setting the API key name, select `Create new key`, then record and store the displayed key.

<figure><img src="/files/nzp2aZ5l7fHlSTLSVEkj" alt="" width="375"><figcaption></figcaption></figure>

{% hint style="warning" %}
API keys are displayed only when issued. Once you close the page, you cannot display the same API key again. Be sure to copy it when issued and store it in a safe location.
{% endhint %}

{% hint style="success" %}
Currently, API keys are used as authentication information for log-sending POST APIs. Therefore, there is no feature for configuring permissions per API key.
{% endhint %}

#### Try requests in Swagger Playground

From the Nodes screen, selecting `Open API documentation` takes you to the Swagger Playground screen.

Using Swagger Playground, you can check Citadel Radar API request and response formats. You can also use an issued API key to try log-sending POST APIs.

<figure><img src="/files/VjtyPaCZ1IBxT8f9z7qR" alt="" width="563"><figcaption></figcaption></figure>

### Manage API keys

Issued API keys can be reviewed from the target application's API key page.

Multiple API keys can be created, and they can also be deleted with the delete icon.