# Managing Your Elicit API Keys

Updated over 2 weeks ago

The Elicit API lets you access Elicit's research capabilities programmatically: search 125 million+ academic papers and generate automated research reports from your own code, scripts, and workflows.

**Beta notice:** The Elicit API is currently in beta. Pricing, rate limits, and available features are subject to change. Visit [docs.elicit.com](http://docs.elicit.com/) for the latest on API usage, endpoints, rate limits, and pricing.

## Creating an API key

Go to **Account Settings** and scroll to the **Integrations** section.

Click **Create API key**.

Give your key a descriptive name (e.g. "Literature review pipeline" or "Systematic review automation").

Your new key will be displayed once. Copy it immediately and store it somewhere secure — you won't be able to see the full key again.

## Viewing your keys

The API Keys table in Integrations shows all of your active keys, including:

- **Name:** the label you gave the key

- **Key:** the key prefix (the rest is hidden for security)

- **Created:** when the key was created

- **Last used:** when the key was last used to make an API request, or "Never" if it hasn't been used yet

## Deleting a key

- Click the trash icon next to the key you want to remove.

- Confirm deletion in the pop up.

Deleted keys are immediately and permanently deactivated. Any applications or scripts using the key will start receiving `401 Unauthorized` errors. This action cannot be undone. You'll need to create a new key if you need access again.

## Security best practices

- Never share your API key or commit it to version control.

- Use environment variables or a secrets manager to store keys in your applications.

- Create separate keys for separate integrations so you can revoke access granularly.

- Delete keys you're no longer using.