Skip to main content
Control who has access to your workspace and manage API keys for programmatic access to your data.

​
Team Members

Invite team members to collaborate on your workspace. Each member is assigned a role that determines their permissions.
Team members list

​
Roles

​
Inviting Members

  1. Navigate to Settings > Team
  2. Click Invite Member
  3. Enter the email address and select a role
  4. The invitee receives an email with a link to join
Invite member form
Invitations expire after 7 days. You can resend or revoke pending invitations from the Team settings page.

​
API Keys

API keys allow programmatic access to Staminads for sending events, querying analytics, and managing workspace configuration.
API keys management

​
Creating an API Key

  1. Navigate to Settings > API Keys
  2. Click Create API Key
  3. Enter a name and optional description
  4. Select the appropriate role (determines scopes)
  5. Optionally set an expiration date
  6. Copy the key immediately — it won’t be shown again
API keys are only displayed once at creation. Store them securely. If you lose a key, you’ll need to create a new one.

​
API Key Roles

​
Scopes

Each role grants a specific set of scopes:

​
Key Status

​
Revoking Keys

To revoke an API key:
  1. Navigate to Settings > API Keys
  2. Find the key and click Revoke
  3. Confirm the action
Revoked keys are immediately invalidated and cannot be restored.
Create separate API keys for different environments (development, staging, production) and integrations. This makes it easy to rotate keys without affecting other systems.

​
Security Best Practices

  • Use the minimum required role — Don’t use Admin keys when Viewer access is sufficient
  • Set expiration dates — For temporary integrations, set keys to expire automatically
  • Rotate keys regularly — Periodically create new keys and revoke old ones
  • Never commit keys to version control — Use environment variables or secret managers
  • Monitor usage — Check last_used_at to identify unused keys that should be revoked