مفاتيح API

gurb_a1b2c3d4e5f6_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
└──┘ └──────────┘ └─────────────────────────────────────────┘
 │         │                          └─ secret — shown ONCE, never again
 │         └─ key id — revoke by this; safe in logs
 └─ prefix. gurb_sa_ instead means a PLATFORM key

createGurbClient({ apiKey: 'gurb_sa_...' })
// → That is a super-admin key, not a community API key. Use GurbAdminClient…

createGurbAdminClient({ adminKey: 'gurb_...' })
// → That is a community API key, not a super-admin key. Use GurbClient…

// Read-only — the default, and the right choice for most integrations
await admin.apiKeys.create({ communityId, name: 'zapier-prod' })

// Explicitly asking for write. One extra argument, and it should feel
// like a decision.
await admin.apiKeys.create({ communityId, name: 'sync-worker', scopes: ['read', 'write'] })

const me = await admin.me()

if (me.actsForIssuer) {
  // Everything you create will belong to the platform admin, not to you.
  throw new Error('This key names no subject — ask for one that does.')
}

# .env — never committed
GURB_API_KEY=gurb_a1b2c3d4e5f6_...

# ✗ never
const gurb = createGurbClient({ apiKey: 'gurb_a1b2c3d4e5f6_...' })   // in source
res.json({ apiKey })                                                 // to a browser

// 1. mint the replacement
const next = await admin.apiKeys.create({ communityId, name: 'zapier-prod-2' })

// 2. deploy it, 3. confirm it works, THEN:
await admin.apiKeys.revoke(oldKeyId)   // immediate, permanent, no undo

const key = await admin.apiKeys.create({ communityId, name: 'zapier' })
console.log(key.key)   // gurb_a1b2… — present here and nowhere else, ever

await admin.apiKeys.list()   // summaries only: id, name, scopes, lastUsedAt