Overview
API keys provide programmatic access to the ArcLume API. They are primarily used for MCP server connections but can also be used for any automated integration.
Creating a key
- Go to the MCP Server page in your organization
- Enter a name for the key (e.g. "My Laptop", "CI Server")
- Click Create key
- Copy the key immediately — it is only shown once
Keys are prefixed with efk_ and scoped to your organization. Only the prefix and last 4 characters are stored; the full key is hashed.
Managing keys
From the MCP Server page, you can see all active keys with:
- Key name and prefix
- Creation date
- Last used timestamp
Click the trash icon to revoke a key. Revocation is immediate — any MCP servers or integrations using that key will lose access.
Security
- API keys are hashed before storage — ArcLume cannot retrieve your full key
- Keys are scoped to a single organization
- Revoked keys cannot be restored; create a new key if needed
- All API key usage is recorded in the activity log
Ready to map your codebase?
ArcLume builds a knowledge graph of your code and generates production-ready epics, stories, and implementation code.
Get Started Free