Use a workspace API key for the governance API:
Create and rotate keys in
Security → API keys. Store the
secret in your platform’s secret manager, never in source code or workflow text
fields.
Credential boundaries
- Dashboard users authenticate through the DataVibe sign-in flow.
- API clients use workspace-scoped
dv_live_ or dv_test_ keys.
- SCIM uses a separate enterprise provisioning token.
- DataVibe does not need your OpenAI, Anthropic, or model-router key when you
submit already-generated output to the gate.
The complete API key is shown only when it is created. Revoke and replace a key
that may have been exposed.
Invalid, expired, or revoked credentials are rejected before policy evaluation
and are not counted as governed checks.