API Keys
API keys authenticate the CLI and the plugin when uploading cards to your account.
Generating a key
- Open the Amber web app
- Click your profile icon in the top right
- Select API Keys
- Click Generate New Key
- Copy the key — it’s only shown once
Using a key
Pass it to the CLI:
amber login --api-key YOUR_KEY
The key is stored locally and used for all subsequent uploads.
Revoking keys
You can revoke any key from the API Keys page in the web app. Revoked keys stop working immediately.
Security
- Keys are hashed before storage — we never store your raw key
- Each key is scoped to your account only
- Generate separate keys for different machines if you want granular revocation