Control who has access to your workspace and manage API keys for programmatic access to your data.
Team Members
Invite team members to collaborate on your workspace. Each member is assigned a role that determines their permissions.
Roles
Inviting Members
- Navigate to Settings > Team
- Click Invite Member
- Enter the email address and select a role
- The invitee receives an email with a link to join
Invitations expire after 7 days. You can resend or revoke pending invitations from the Team settings page.
API Keys
API keys allow programmatic access to Staminads for sending events, querying analytics, and managing workspace configuration.
Creating an API Key
- Navigate to Settings > API Keys
- Click Create API Key
- Enter a name and optional description
- Select the appropriate role (determines scopes)
- Optionally set an expiration date
- Copy the key immediately — it won’t be shown again
API keys are only displayed once at creation. Store them securely. If you lose a key, you’ll need to create a new one.
API Key Roles
Scopes
Each role grants a specific set of scopes:
Key Status
Revoking Keys
To revoke an API key:
- Navigate to Settings > API Keys
- Find the key and click Revoke
- Confirm the action
Revoked keys are immediately invalidated and cannot be restored.
Create separate API keys for different environments (development, staging, production) and integrations. This makes it easy to rotate keys without affecting other systems.
Security Best Practices
- Use the minimum required role — Don’t use Admin keys when Viewer access is sufficient
- Set expiration dates — For temporary integrations, set keys to expire automatically
- Rotate keys regularly — Periodically create new keys and revoke old ones
- Never commit keys to version control — Use environment variables or secret managers
- Monitor usage — Check
last_used_at to identify unused keys that should be revoked
