# Server keys

| Command | Purpose |
|---|---|
| `vatio keys list` | Active keys: prefix, environment, label, last use |
| `vatio keys create [--env NAME] [--label NAME]` | Create a key; defaults to `live` |
| `vatio keys revoke PREFIX` | Revoke a key |

`create` prints the full key once. Vatio keeps only a digest of it.

A server key is what your own backend calls the [server API](https://vatio.ai/docs/api/messages)
with. It belongs to the workspace and one environment. It is not your CLI token
(`vat_…`), which is yours and is replaced at every `vatio login`. It is not a
publishable token either, which is public by design. Keep a server key on a
server: it can message your customers.

A preview key can only write to your own test phones, which makes it the way to
[try the API from your phone](https://vatio.ai/docs/api/messages#try-it-from-your-phone).