# API Keys

Manage project-scoped API keys (`vilna_api_...`) used to authenticate the public Vilna API (`api.vilna.io`). A project must exist before a key can be created. The raw secret is returned in the creation response, including authorized retries within its replay window.

 - [GET /workspaces/{workspace_id}/projects/{project_id}/keys](https://docs.vilna.io/apis/mgmt/api/api_key/list-workspace-project-keys.md): Return project API keys.
 - [POST /workspaces/{workspace_id}/projects/{project_id}/keys](https://docs.vilna.io/apis/mgmt/api/api_key/create-workspace-project-key.md): Create a new project API key. The raw secret can be replayed with the same intent for 60 seconds from successful creation, subject to current access and key state. Retries do not extend this window.
 - [GET /workspaces/{workspace_id}/projects/{project_id}/keys/{key_id}](https://docs.vilna.io/apis/mgmt/api/api_key/get-workspace-project-key.md): Return a project API key by ID.
 - [POST /workspaces/{workspace_id}/projects/{project_id}/keys/{key_id}/actions/revoke](https://docs.vilna.io/apis/mgmt/api/api_key/revoke-workspace-project-key.md): Revoke a project API key. Once revoked, the key can no longer be used for authentication.