> ## Documentation Index
> Fetch the complete documentation index at: https://docs.useshareable.com/llms.txt
> Use this file to discover all available pages before exploring further.

# API keys

> Create and revoke the keys that authenticate API & MCP requests.

API keys authenticate every [REST](/api-reference/pages) and [MCP](/mcp-server) request. They're managed in the app — not via the bearer API — so a leaked key can never create more keys.

## Create a key

1. Sign in at [useshareable.com](https://useshareable.com).
2. Open **Developers**.
3. Click **Create key**, name it (e.g. *"CI publish bot"*), and **copy it immediately** — the full key (`sm_…`) is shown only once.

## Use a key

Pass it as a bearer token:

```bash theme={null}
Authorization: Bearer sm_your_key
```

…or as the `SHAREABLE_API_KEY` env var for the [MCP server](/mcp-server).

## Revoke a key

In **Developers**, click **Revoke** next to a key. It stops working immediately — rotate by creating a new key first, updating your config, then revoking the old one.

<Note>
  Keys are stored only as a SHA-256 hash. We can't recover a key after creation, so if you lose one, revoke it and create a new one.
</Note>