# Container App API Keys

> **📝 Note**: This is a Preview feature.

Container App API keys allow you to programmatically interact with SingleStore Aura environment. These keys are used to authenticate requests to Container App APIs, which enables automation, integration with CI/CD pipelines, and secure service-to-service communication. A Container App API key can be created for and used to access any Container App, such as **Cloud Functions** and **Dashboard Apps**. The API key is unique and only enables access to the Container App for which it is created.

## Create a Container App API Key

To create an API key, perform the following steps:

1. In the Cloud Portal, under the **Container Services** section, navigate to a Container App.

2. Select an App instance. An example with a Cloud Function App is demonstrated.

3. Select **View API Keys** in the upper right corner.

4. Select **Create API Key**.

5. In the **Create API key for \<Container\_App> - \<Container\_App\_name>&#x20;**&#x64;ialog,

   1. Enter the name in the **API Key Name** field.

   2. In **Expiration**, select the expiration date.

   3. Select **Create API Key**.

6. Once the API key is generated, select **Copy API Key** to copy it or **Save As Secret** to store it securely in **[Secrets](https://docs.singlestore.com/cloud/developer-resources/secrets.md)**. The API key is displayed only **once**.

7. If **Save As Secret** is selected:

   1. In the **New Secret** dialog, enter the name for the secret in the **Name** field.

   2. Select **Create Secret**. The API key is stored in a secret.

8. Select **Close**.

## Types of Container App API Keys

There are two types of Container App API keys:

1. **Active API key**: An API key that is currently valid, associated with an existing App instance or user, and has not been revoked. It can successfully authenticate requests to the Container App APIs.

2. **Orphaned API key**: An API key that is not associated with an existing App instance, as the App or user that created it, was deleted. Orphaned keys are inactive and cannot be used to authenticate API requests.
   > **📝 Note**: Orphaned API keys pose a potential security risk and should be identified and revoked promptly.

## Manage a Container App API Key

You can manage a Container App API key in two ways:

1. Using the App instance

2. Using the Container Service

## Using the App Instance

1. Navigate to the Container Service.

2. Under the **Name** column, select the App instance for which you want to manage the Container App API key.

3. Select **View API Keys** in the upper right corner. You can view the total number of API keys for the App instance on the **View API Keys** button.

4. To revoke an active or orphaned Container App API key, perform the following tasks:

   1. Revoke an Active Container App API key:

      1. Navigate to the **Active** tab.

      2. Select the delete icon under the **Actions** column next to your API key.

      3. In the **Revoke API key** dialog, enable the agreement and select **Revoke**.

   2. Revoke an Orphaned Container App API key:

      1. Navigate to the **Orphaned** tab.

      2. Select the delete icon under the **Actions** column next to your API key.

      3. In the **Revoke API key** dialog, enable the agreement and select **Revoke**.
         > **📝 Note**: Orphaned keys can only be revoked by the **Aura Owner** or **Owner** of the organization.

## Using the Container Service

1. Navigate to the Container Service.

2. Select **View API Keys** in the upper right corner.

3. To revoke an active or orphaned Aura App API key, perform the following tasks:

   1. Revoke an Active Container App API key:

      1. Navigate to the **Active** tab.

      2. Select the delete icon under the **Actions** column next to your API key.

      3. In the **Revoke API key** dialog, enable the agreement and select **Revoke**.

   2. Revoke an Orphaned Container App API key:

      1. Navigate to the **Orphaned** tab.

      2. Select the delete icon under the **Actions** column next to your API key.

      3. In the **Revoke API key** dialog, check the agreement and select **Revoke**.
         > **📝 Note**: Orphaned keys can only be revoked by **Aura Owner** or **Owner** of the organization.

***

Modified at: July 7, 2026

Source: [/cloud/container-services/container-app-api-keys/](https://docs.singlestore.com/cloud/container-services/container-app-api-keys/)

(An index of the documentation is available at /llms.txt)