Token Expiry & Refresh

API keys do not expire automatically.

If you need short‑lived credentials, create a server‑side endpoint that exchanges your permanent key for a JWT you issue and control.

Key rotation checklist:

1. Generate a new key in the dashboard.

2. Deploy it to your servers.

3. Delete the old key once no traffic is observed for 24 h.