Scoped API keys: limit a key to specific projects, environments, or services
j
jackson ballow
Please please please let us create API keys limited to specific
projects/environments/services, with permission levels (read-only,
deploy, full).
This would be for agent controlled deployments. I run an autonomous AI agent
that should be able to deploy, read logs, and manage env vars for our
dev services, but have zero access to production. Today every API key
has full account access, so the only workaround is a separate
workspace plus a separate user account, which is clunky.
This is becoming common as more teams let AI agents handle
deployments. Scoped keys would make Render the safest place to do it.
Log In