API keys

An API key lets your own systems talk to Dual without an interactive sign-in — from a nightly job, backend service or deployment script. Send it as `x-api-key: <secret>`. A key belongs to the person and organization that created it and carries its own list of what it may do, which can never be more than its creator is allowed to do themselves. You see the secret once, when the key is created, and never again, so store it somewhere safe at that moment. Keys last up to a year, and one person can hold ten at a time.