API keys

Keys authenticate your machines to the Hub. Two orthogonal attributes only ever narrow access: read-only (pull, never push or mutate) and scope (a data-plane-only key limited to specific workspaces). An unscoped key syncs personal memory and every workspace you belong to; a scoped key reaches neither personal memory nor account management.