Keys

Commands for managing project-scoped ingest credentials (evs_…). These are the keys your application's SDK uses to record events — distinct from your CLI PAT (covered under Auth).

--project is optional once es projects use <id> has been run; it falls back to the saved default.

Commands

Command	What it does
es keys list [--project <id>]	Active keys for a project.
es keys create [--project <id>] --name <key-name>	Mint a new key. The plaintext is shown once — copy it before closing the terminal.
es keys revoke [--project <id>] --key <key-id>	Revoke a key.

One-time secret display

The full key plaintext (evs_…) is only returned by the create call. The server never echoes it again. If you close the terminal before saving it, revoke the key and mint a new one — there's no recovery path.