> ## Documentation Index
> Fetch the complete documentation index at: https://www.pickfu.com/llms.txt
> Use this file to discover all available pages before exploring further.

# How to create and manage API keys

> Generate and manage PickFu API keys for the REST API, CLI, and MCP server, plus security tips for storing, rotating, and revoking your tokens.

API keys let you authenticate with PickFu programmatically. Use them with the [MCP server](/help/how-to-use-the-pickfu-mcp-with-ai-assistants), [CLI](https://www.pickfu.com/docs/developers/cli), [REST API](https://www.pickfu.com/docs/api-reference), and custom automation scripts.

# When to use API keys

API keys are ideal when you need:

* **Non-interactive authentication** — CI/CD pipelines, cron jobs, or server-side scripts that run without a browser

* **Persistent access** — API keys don't expire like OAuth sessions, so they're reliable for long-running automations

* **Simplicity** — pass a single token instead of going through the OAuth flow

If you're using PickFu interactively from an AI assistant like Claude Desktop or Cursor, the built-in OAuth flow may be more convenient — but API keys work there too.

# Creating an API key

1. Log in to PickFu and go to [Settings > API Keys](https://app.pickfu.com/settings/api-keys)

2. Click **Create API Key**

3. Give the key a descriptive name (e.g., "CI pipeline" or "MCP server")

4. Copy the key value immediately — it is only displayed once and cannot be retrieved later

# Keeping your keys secure

* **Store keys securely.** Use environment variables or a secrets manager — never commit API keys to source control

* **Create separate keys for different uses.** If one key is compromised, you can revoke it without affecting your other integrations

* **Delete compromised keys immediately.** Go to [Settings > API Keys](https://app.pickfu.com/settings/api-keys) and delete the key, then create a replacement

* **Review keys periodically.** Remove keys you no longer use

# Where to use API keys

Pass your API key as a Bearer token in the `Authorization` header:

```
Authorization: Bearer your-api-key-here
```

API keys work with all PickFu developer tools:

* **MCP server** — add the key to your MCP client's headers configuration

* **CLI** — pass the key during authentication setup

* **REST API** — include the header in every API request

For detailed setup instructions for each tool, see the [authentication documentation](https://www.pickfu.com/docs/developers/authentication).

***

Related Articles

* [How do I create my first poll?](/help/how-do-i-create-my-first-poll)
* [What integrations are available with PickFu?](/help/what-integrations-are-available-with-pickfu)
* [How to build PickFu surveys with URL parameters](/help/how-to-build-pickfu-surveys-with-url-parameters)
* [How to use the PickFu MCP with AI assistants](/help/how-to-use-the-pickfu-mcp-with-ai-assistants)
* [How to set up a PickFu AI assistant in Feishu using OpenClaw](/help/how-to-set-up-a-pickfu-ai-assistant-in-feishu-using-openclaw)