agent-manage-keys

Manage API Keys

Create, inspect, rotate, and revoke API keys for the Epic FlowState gateway.

Prerequisites

• Authenticated with a valid API key or OAuth session (see agent-auth)
• EPIC_FLOWSTATE_API_KEY set in environment, or CLI logged in

Steps

List all keys

epic-agent keys list
# Shows: key ID, name, created date, last used, scopes

Create a new key

epic-agent keys create --name "my-agent" --scopes "read:agents,write:agents"
# Returns: key ID and secret (shown once — save it immediately)

Inspect a key

epic-agent keys get <key-id>
# Shows: metadata, scopes, usage stats (not the secret)

Rotate a key (create new, revoke old)

# 1. Create replacement
epic-agent keys create --name "my-agent-v2" --scopes "read:agents,write:agents"
# 2. Update all consumers with new key
# 3. Revoke old key
epic-agent keys revoke <old-key-id>

Revoke a key

epic-agent keys revoke <key-id>
# Immediate effect — all requests with this key will return 401

Key scopes

Scope	Permissions
read:agents	List and inspect agents
write:agents	Create, update, delete agents
read:logs	View action logs
read:sessions	List OAuth sessions
write:sessions	Revoke OAuth sessions
read:webhooks	List webhook endpoints
write:webhooks	Create, update, delete webhooks
read:account	View account profile
write:account	Update account profile

Error handling

• Key not found: verify ID with epic-agent keys list
• Cannot revoke only key: create a new key first, then revoke
• Insufficient scope to create keys: requires write:keys scope on current credentials