Someone left our company. What should we do about Agent API keys?

1. Remove them from the team in Team in the Console.
2. Rotate keys they had access to: create replacements, deploy them, then revoke the old keys.
3. Review recent runs with GET /v1/runs and Logs for anything unexpected; check key_id on each run.
4. Check spend in Usage.

Keeping one key per service makes this quick: you only rotate the keys that person could see.

Learn more#

• Plans and credits
• Limits and best practices