OpenSana Docs

API Keys

Create and manage API keys for the CLI and MCP integrations.

API keys authenticate a user for CLI and MCP access.

What API Keys Are Used For

  • opensana setup
  • opensana connect
  • one-shot CLI commands
  • MCP connections from editors and agents

Important Properties

  • keys are user-scoped
  • keys inherit the same permissions the user already has
  • keys do not create a new permission model

Operational Guidance

  • create separate keys for separate machines or workflows when possible
  • rotate keys if a machine is lost or a secret leaks
  • do not commit keys into the repository
  • prefer config files and local secret storage over shell history

On this page