Skip to main content
Platform API keys provide programmatic access for users and CI pipelines. For agent authentication keys, use dome agents create-key.

​
List

dome platform-keys list List platform API keys for the current workspace.

​
Create

dome platform-keys create Create a new platform API key. The interactive picker fetches the grantable permissions for your role at the current scope. Use dome platform-keys permissions to discover the same list non-interactively.

​
Revoke

dome platform-keys revoke [name-or-id] Revoke a platform API key by name or ID.

​
Permissions

dome platform-keys permissions List the permissions you can grant to a new platform API key at the current context’s scope. The output is exactly what dome platform-keys create --permissions will accept for your role; the server re-validates on submit. Use this for CI scripts that need to know valid --permissions values, or to confirm what create would offer in its interactive picker. The scope follows your active context: a workspace context returns workspace permissions, a tenant context adds tenant permissions, and an org context adds org permissions on top.
Workspace admins do not see tenant-only permissions such as agent.delete or agentkey.manage in this list. Switch to a tenant or org context (or have a tenant admin run the command) to grant them.