API keys are workspace secrets. Pro for REST API. Elite for MCP.
Create a key
- Sign in on the web as a workspace admin.
- Settings → API → Create key.
- Copy the bk_live_ value once. It is not shown again.
- Store in a secrets manager, not in a repo.
Use the key
- REST: X-API-Key header on /api/v1/...
- MCP: BETTERKNOCKS_API_KEY in Cursor config.
Rotate
Create a new key, update integrations, revoke the old key. Revoke immediately if a key leaks.
