---
title: API keys
description: Create and revoke the keys that let an MCP client read the library for you.
---

An API key lets a tool such as Claude or Cursor call the [MCP server](/mcp/installation) as you.

## Create a key

1. Sign in and open Settings, then API keys (https://snaps.design/settings/api-keys).
2. Choose Create key and give it a name that says where it will be used, such as "Claude Code laptop".
3. Copy the key. **It is shown once.** We store only a SHA-256 hash, so we cannot show it again.

Keys start with `ass_`:

```text
ass_…
```

## Scopes

A key can read the library. A key with the `write` scope can also call `request_app` and `add_og_site`.

## Use a key

Send it as a bearer token:

```http
Authorization: Bearer ass_…
```

Each key is limited to 60 requests per minute. Past that, requests fail until the window resets.

## Keep it safe

- Put keys in environment variables or a secret store. Do not commit them.
- Use one key per tool or machine, so you can revoke one without breaking the others.
- Revoke a key from the same page. Revoked keys stop working immediately. The last-used time helps you spot keys you no longer need.