AI
best practice
Set Auto-Expiring API Keys to Enhance Security
Assign expiration dates to Claude API keys for better security.
Configure a 'TTL' (Time To Live) for new API keys in the Claude Console to automate security rotations.
Claude
The Scenario
Your company's security policy requires that all API credentials be rotated every three months to minimize the risk of long-term credential leaks.
Before & after
The old way
You create API keys with no expiry, requiring you to manually track them in a spreadsheet and rotate them every 90 days, which takes about 15 minutes of admin time per cycle.
With AI
By selecting a preset or custom duration in the Claude Console, you can set an expiration date in seconds, receiving an automated email reminder 7 days before the key expires.
The Prompt
Show me how to use the Claude Admin API to list my current API keys and filter them by their 'expires_at' field so I can identify which keys need rotation this week.
Source
Claude Platform release notes - Claude Platform Docs"You can now set an expiration when you create an API key... Anthropic emails the creator before expiration. Existing keys are unaffected."