> ## Documentation Index
> Fetch the complete documentation index at: https://docs.zelinqa.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# API Keys

> Generate and manage API keys for the NBQ Engine runtime API.

The **API Key** tab is where you create the keys your application uses to authenticate with the runtime API.

<Frame>
  <img src="https://mintcdn.com/zelinqa-d77427f3/FpdEzAeb9Hg8n1by/images/backoffice-api-keys.png?fit=max&auto=format&n=FpdEzAeb9Hg8n1by&q=85&s=cd50466aa52f438e9fb999d91060cbdf" alt="API Keys tab in the Zelinqa NBQ Studio" width="2474" height="1176" data-path="images/backoffice-api-keys.png" />
</Frame>

The list shows each key masked (prefix + last 4 characters), its creation date, and whether it is **Active** or **Revoked**. You can generate multiple keys — for example one per environment — and revoke any of them instantly.

<Warning>
  The API Key tab is **locked** until your NBQ instance has at least **10 active questions**. Build your question bank first, then return here to generate a key.
</Warning>

## Generating a key

<Steps>
  <Step title="Open the API Key tab">
    Click **Configuration → API Key** in the NBQ Studio navigation.
  </Step>

  <Step title="Click Generate a key">
    A new key is created immediately and displayed in full — **this is the only time you will see it**.
  </Step>

  <Step title="Copy the key now">
    Copy it and store it as a secret in your application (environment variable or secrets manager). Once you leave the page, the full key cannot be retrieved again.
  </Step>
</Steps>

<Warning>
  The API key is shown **only once**. If you lose it, revoke it and generate a new one.
</Warning>

## Key format

Every NBQ Engine key starts with `nbq_live_`:

```
nbq_live_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
```

## Key list

The key list shows each key **masked** (prefix + last 4 characters), its creation date, and its status (**Active** or **Revoked**). You can generate several keys per instance — for example, one per environment.

## Revoking a key

Click **Revoke** next to any key. It stops working immediately. Generate a replacement key and update your application.

For full security guidance, see [API Key Safety](/en/security/api-key-safety).