API Keys can only be created and managed on the https://h3hub.cn/account/ page. Use them for server-to-server calls by sending them in the X-API-Key header.

Create

Click "Create API Key" on the account page and give it a name. The plaintext is shown only once and cannot be viewed again.

Manage

On the account page you can rename, revoke, temporarily disable, or enable a key.

  • Revocation takes effect immediately and the record stays.
  • A disabled key returns 401; enabling it restores access. A revoked key cannot change status.
  • Each user can keep up to 20 non-revoked keys.

Do not put keys in frontend code or public repositories. If a key leaks, revoke it and create a new one.