About this block

API Keys Panel is the key management view for a workspace: a one time reveal banner for a key created moments ago (Billing worker) shows the full secret once with a Copy key button, then a ruled list of three active keys, each with a name, a Live or Test environment badge, a masked prefix in a mono chip, scope badges, created and last used times, and a Revoke action. The header counts three active keys and carries a Create key button.

Keys are one const array with name, environment, prefix, scopes, created, and lastUsed fields. The one time reveal banner is the detail that matters: the full secret shows once, and after a reload only the prefix remains, the security contract every real key store enforces.

When to use

Reach for this block on a developer settings page or an API section, wired to your key management API. Show the reveal banner right after a user creates a key so they can copy the secret before it is masked for good.

A natural flow around it on an Application Pro page:

Before

• Settings pages
• Developer tools

After

• Integration logs table
• Activity

What you can display

One strong use is the workspace API key list. Other key panels:

• Personal access tokens. Fine grained scopes with an expiry column and the last used IP address.
• Service account keys. Machine credentials grouped by service with a rotation due badge.
• Webhook signing secrets. One secret per endpoint with a roll secret action and a grace window.

Tip: reveal the full secret exactly once and say so plainly; a key store that shows it twice trains users to store it carelessly.