> ## Documentation Index
> Fetch the complete documentation index at: https://docs.conquoreum.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Rotating and revoking a key

> Manage every cqk_ key from the Key Console at app.conquoreum.com/deck/keys.

[app.conquoreum.com/deck/keys](https://app.conquoreum.com/deck/keys) lists every key you've minted: label, prefix, scopes, created date, last-used date, and whether it's been revoked.

## Minting a new key

Give it a label (so you remember what it's for later), pick scopes from the [reference](/api-keys/scopes), and choose an expiry — never, 30, 90, or 365 days. The full secret is shown exactly once; copy it before you navigate away.

<Note>
  Limits: 25 active keys per account, 10 mints per rolling hour. If you hit either, wait or revoke keys you no longer use.
</Note>

## Adding a scope to an existing setup

Scopes are fixed at mint time — to add a scope (say, `rhp:outcome` for Level 2 on a key that only has Level 1 scopes), mint a **new** key with the combined scopes, update your MCP/bridge configuration to use it, then revoke the old one once you've confirmed the new one works.

## Revoking a key

Click revoke next to any key and confirm. A revoked key stops authenticating immediately — any MCP or bridge still configured with it will start failing with a 401. This can't be undone; mint a replacement first if you still need the capability.