API Key Manager

Issue, list, and revoke API keys — shown once in plaintext, hashed thereafter.

1. 1.A 256-bit random secret is generated and shown to you exactly once.
2. 2.Only its SHA-256 hash and a short display prefix are stored — the plaintext is never persisted.
3. 3.Revoking sets a timestamp (soft delete) so past usage stays auditable.

Shared public demo account — everyone visiting this page sees the same key list. In the original project this is real per-user Supabase Auth with row-level security; here it's one fixed demo account so you can try it without signing up.

Create a key