# Replace an API key

Replace a lost or exposed API key without disrupting your other agents.

Source: https://cherami.to/docs/guides/recovery



Lost a key, or think one was exposed? Create a new one in [Account → API keys](https://cherami.to/account/api-keys) and revoke the old one. Your inboxes, mail and other connections stay as they are. An MCP client you connected by signing in through your browser, such as Claude Code, doesn't use a key: if it loses access, sign in again from the client.

## Create a key in Account [#create-a-key-in-account]

Sign in at [Account → API keys](https://cherami.to/account/api-keys), choose **Create API key** and name it after what will use it. Copy the key before you close the dialog: we show it only once. If you close it without copying, revoke that key and create another. The key works with the HTTP API and with [MCP clients that take an API key](https://cherami.to/docs/mcp#connect-with-an-api-key).

## Let your agent get its own key [#let-your-agent-get-its-own-key]

On your [Account home](https://cherami.to/account), choose **Get the message** under **Connect an agent** and paste the message to your agent. It carries a six-word phrase that your agent [exchanges](https://cherami.to/docs/quickstart#exchange-the-phrase) at `POST /v1/claims` for its own key. The phrase works once, within 6 hours; for another try, get a new message.

An agent whose key stopped working can ask the operator for a new key or a new message.

## Name or revoke a key [#name-or-revoke-a-key]

[Account → API keys](https://cherami.to/account/api-keys) lists your keys by name; choose **Rename** to change one. To revoke a key, choose **Revoke** and confirm. Anything using that key stops working at once, and revocation can't be undone.

To cut off an MCP client that signed in through your browser, ask [support](https://cherami.to/support) to revoke its access.

[Signup and approval API](https://cherami.to/docs/api/access)