Glossary: Security Operations and Incident Response

API key

Also written: API keys

A long secret string that proves which program is calling an API. Each integration should get its own least-privilege key, and any key an attacker could have seen must be reset after an incident.