> ## Documentation Index
> Fetch the complete documentation index at: https://docs.browseract.com/llms.txt
> Use this file to discover all available pages before exploring further.

# API Keys & Authentication

> Create and manage API keys used to connect BrowserAct to supported tools and integrations.

API keys authenticate BrowserAct integrations and API requests. An API key grants access to your account, so keep it private and create separate keys when you need to manage connections independently.

## Open API Key Management

1. Open `Integrations` in the BrowserAct dashboard.
2. Select `Manage API Keys`.

The Integrations page also shows the API server, API documentation, supported tools, and integration platforms.

<img src="https://mintcdn.com/browseract/NsOCzqG0hq750owC/images/integrations-manage-api-keys.png?fit=max&auto=format&n=NsOCzqG0hq750owC&q=85&s=d102d43bf528b2c9fb988c8b77bc7fd1" alt="Open Manage API Keys from Integrations" width="1481" height="573" data-path="images/integrations-manage-api-keys.png" />

## Create an API Key

1. In the API Keys window, select `Create New API Key`.

<img src="https://mintcdn.com/browseract/29l4R2D8vKlJa4eu/images/api-keys-create.png?fit=max&auto=format&n=29l4R2D8vKlJa4eu&q=85&s=13c18db77db13bbe856c678b0312f4ec" alt="Create a new API key" width="1282" height="601" data-path="images/api-keys-create.png" />

2. Enter a name that identifies where the key will be used.
3. Choose a **CLI Action Confirmation** mode.

### Confirmation Required

Critical actions initiated through the CLI must be confirmed on the BrowserAct page before execution can continue. These actions can include purchases and creating or deleting assets.

### Allow Automatic Execution

The connected agent can complete supported CLI actions without additional confirmation, including critical actions shown in the product warning.

Use this mode only for a trusted environment where unattended execution is required.

4. Select `Confirm`.

<img src="https://mintcdn.com/browseract/29l4R2D8vKlJa4eu/images/api-key-confirmation-mode.png?fit=max&auto=format&n=29l4R2D8vKlJa4eu&q=85&s=9d86f2a94a57bdbf90b18a150c015fa5" alt="Name the API key and choose its confirmation mode" width="850" height="538" data-path="images/api-key-confirmation-mode.png" />

## Copy and Manage API Keys

The API Keys list shows each key's name, masked key value, mode, creation time, and last-used time.

Use the icons in the **Actions** column to:

* Copy the API key
* Edit its name or confirmation mode
* Delete the API key

<img src="https://mintcdn.com/browseract/29l4R2D8vKlJa4eu/images/api-key-actions.png?fit=max&auto=format&n=29l4R2D8vKlJa4eu&q=85&s=06abf46fe5e6354baff350cf84f3fdc6" alt="Copy, edit, or delete an API key" width="1126" height="508" data-path="images/api-key-actions.png" />

Deleting a key stops integrations and clients that depend on it from authenticating. Update the connected tool before removing a key that is still in use.

## API Usage Limits

* **Rate limits:** No rate limits.
* **Free users:** 1 task per run.
* **Paid users:** Up to 20 concurrent tasks.
* **Task duration:** Up to 7 hours per task.

## Security Practices

* Do not place API keys in prompts, screenshots, public repositories, or shared documents.
* Use a separate key for each integration when practical.
* Prefer `Confirmation Required` unless automatic critical actions are necessary.
* Delete keys that are no longer used.
* If a key is exposed, delete it and create a replacement.

For endpoints, request headers, task status, result retrieval, and Webhooks, see the existing **API Reference**.