> ## Documentation Index
> Fetch the complete documentation index at: https://docs.oneloop.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# SDK Keys

<Info>
  SDK Keys are keys that you use to integrate with our systems. They are not
  customer facing.
</Info>

<Warning>SDK Keys are secrets. Do not expose them.</Warning>

SDK Keys are used to authenticate your application with our systems. SDK Keys are not customer facing and should be stored securely in your backend.

The concept of workspace does not apply to SDK Keys. SDK Keys are global and can be used across all workspaces.

## Generating SDK Keys

SDK Keys can only be generated using the [Dashboard](https://dashboard.oneloop.ai).

<img src="https://mintcdn.com/oneloop/QLBbQ34otHR2mIzr/images/create_root_key.png?fit=max&auto=format&n=QLBbQ34otHR2mIzr&q=85&s=852d98122e373fc952aa3a900d22c9ed" width="1714" height="654" data-path="images/create_root_key.png" />

## SDK Key Scopes

You can associate scopes with the SDK Key to ensure more security.

<img src="https://mintcdn.com/oneloop/QLBbQ34otHR2mIzr/images/create_root_key_scope.png?fit=max&auto=format&n=QLBbQ34otHR2mIzr&q=85&s=b9976185898ce7efa530f2fd386bdcc5" width="984" height="814" data-path="images/create_root_key_scope.png" />

### Definitions

When you create a SDK Key you can configure the following scopes

| Scope Name         | Description                   |
| ------------------ | ----------------------------- |
| `workspace`        | Access to workspace resources |
| `workspace_scopes` | Access to workspace scopes    |
| `api_keys`         | Access to API keys            |

Based on the scope, the SDK key can access certain functionality.

For example, a SDK Key without the `api_keys` write scope, can not create API keys on the fly.

## Considerations

Following are some considerations:

* [x] SDK Keys can only be generated using our Dashboard.
* [x] You can assign different scopes to your SDK Keys for the right authorization level.
* [x] You should store SDK keys securely in your backend.
* [x] SDK Keys are not publishable keys, they are secret keys that must not be exposed to the public
* [x] In the event of exposure, revoke them immediately in the dashboard.