From 220851e6f4eb476661615638fa58472bb44bdb55 Mon Sep 17 00:00:00 2001 From: Ben <62250174+benfrank241@users.noreply.github.com> Date: Wed, 11 Mar 2026 11:41:21 -0400 Subject: [PATCH] =?UTF-8?q?doc:=20What's=20New=20in=20Hindsight=20Cloud=20?= =?UTF-8?q?=E2=80=94=20Programmatic=20API=20Key=20Management=20(#543)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit * doc: What's New in Hindsight Cloud — Programmatic API Key Management --------- Co-authored-by: Claude Opus 4.6 --- ...3-11-hindsight-cloud-api-key-management.md | 30 +++++++++++++++++++ 1 file changed, 30 insertions(+) create mode 100644 hindsight-docs/blog/2026-03-11-hindsight-cloud-api-key-management.md diff --git a/hindsight-docs/blog/2026-03-11-hindsight-cloud-api-key-management.md b/hindsight-docs/blog/2026-03-11-hindsight-cloud-api-key-management.md new file mode 100644 index 00000000..85d55067 --- /dev/null +++ b/hindsight-docs/blog/2026-03-11-hindsight-cloud-api-key-management.md @@ -0,0 +1,30 @@ +--- +title: "What's New in Hindsight Cloud: Programmatic API Key Management" +authors: [benfrank241] +date: 2026-03-11 +tags: [hindsight-cloud, release, api] +hide_table_of_contents: true +--- + +[Hindsight Cloud](https://ui.hindsight.vectorize.io/signup) now supports programmatic API key management. API keys with the **Key Creator** capability can create, list, and revoke bank-scoped child keys via the API — no admin or UI access required. + + + +## What You Can Do + +- **Create child keys** — provision short-lived, least-privilege keys scoped to specific banks +- **Bank scope enforcement** — child keys can only access banks within the parent key's scope +- **Expiration constraints** — child keys cannot outlive their parent +- **Cascade revocation** — revoking a parent key automatically revokes all of its children +- **Immutable children** — programmatically created keys cannot have their bank scope edited; revoke and recreate instead +- **Audit trail** — all key creation, revocation, and scope changes are logged with actor identity + +## Why This Matters + +If you're running a multi-tenant setup — one memory bank per customer, per agent, or per environment — you no longer need to manage keys through the dashboard. Your application can provision scoped keys on the fly, rotate them on a schedule, and revoke them instantly when access should end. + +Combined with [bank-scoped API keys](/blog/2026/03/09/hindsight-document-upload#what-else-is-new) (released March 9), this gives you a complete least-privilege key hierarchy: a parent key with Key Creator capability manages child keys that are each locked to specific banks. + +## Get Started + +Programmatic API key management is available now in [Hindsight Cloud](https://ui.hindsight.vectorize.io/signup). Create a key with the Key Creator capability to start provisioning child keys via the API.