About this block

Api Key Created Dialog is the one-time key reveal, shown as a static scrim-plus-card blueprint. The key sk_live_acme_8h2kXqR7mNpL4vWtYcFjDbZeUoSi3nGa sits in a monospaced read-only field with a copy button, directly below an AlertTriangle warning: This is the only time you will see this key. Copy it now and store it in a secrets manager. A permissions list follows (Read all resources and Write events granted; Delete resources and Manage team members struck through with Not granted badges), then a checkbox that gates the Done button: I have copied and stored this key somewhere safe.

Permissions are one const array with a granted flag. The Done button ships disabled; the checkbox feel makes it clear the user must confirm before dismissing.

When to use

Reach for this block immediately after a key is generated, as the only surface where the raw secret is ever shown. Wire the key value and permissions array to the API response and enable the Done button when the checkbox is checked.

A natural flow around it on an Application Pro page:

Before

• Developer tools
• Settings page

After

• Developer tools

What you can display

One strong use is the API key reveal on creation. Other one-time secret dialogs:

• Webhook secret. Same layout, secret value instead of a key, endpoint URL in the subtitle.
• Recovery codes. List of one-time codes replacing the single key field.
• Service account credentials. Client ID and secret shown together, both copyable.

Tip: the checkbox gates Done on purpose; it turns passive reading into active confirmation that the user has stored the key.