> ## Documentation Index > Fetch the complete documentation index at: https://kmerhosting.com/docs/llms.txt > Use this file to discover all available pages before exploring further. # API keys > Create and manage KmerHosting API keys without exposing customer session cookies. API keys are created from the Account section of the customer console. The API-key tab shows named keys, status, creation time, and usage information. ## Create a key 1. Open Account and select the API Keys tab. 2. Enter a descriptive name such as `billing-report-production`. 3. Create the key. 4. Copy the complete value immediately. 5. Store it in a secret manager or protected environment variable. The complete key is shown only at creation and must be replaced with a redacted value before capture. ## Security model * New keys use the `kh_live_` prefix. * The complete key is returned only once. * The platform stores a SHA-256 hash rather than the recoverable plaintext value. * Keys can be deactivated, reactivated, and permanently deleted. * The API rejects inactive or invalid keys. * Usage and last-use information can be shown in the console. Usage visibility helps identify unexpected automation activity. ## Recommended scopes The developer platform can distinguish account, service, domain, billing, order, notification, and AI Agent permissions. Grant only what the integration needs. Never place an API key in browser-side JavaScript, a public Git repository, a screenshot, or a support ticket.