Give every integration only the API access it needs.
API keys make it easy to automate work on Render. But when a key inherits its creator’s full permissions, a credential created for one task can carry more access than that task requires.
We're launching Scoped API Keys so you can choose which Render API actions a key can perform, limited to permissions you already have. This gives CI jobs, internal tools, agents, and other integrations a more controlled way to act on Render while reducing the potential blast radius of a compromised key.
Scoped API Keys are currently in private beta; to request access, fill out this form.
Permissions that fit the job
A key’s effective access is limited by both the scopes you select and your own permissions—it can never exceed the permissions you already have. You can review and update a key’s scopes as your needs change.
This is useful for integrations and automation, including MCP integrations and CLI workflows that use Render API keys. For example:
- Infrastructure monitoring agents: Give an agent access to logs, metrics, and service health without allowing it to deploy code or modify infrastructure.
- Security and compliance integrations: Let a team pull Render audit logs into its SIEM without granting access to change services or configuration.
- CI/CD pipelines: Allow an automation to trigger deployments without giving it permission to modify service settings or access secrets.
We designed the setup flow to make least-privilege access easy to configure. Choose a workspace and set access levels for the resource types your key needs, with access to secrets controlled separately.
For details on supported capabilities and limitations during private beta, see the documentation.
How to join private beta
Capacity is limited during this phase. To request access, fill out this form. We'll review your request and contact you when we’re ready to onboard your team.
Once approved, you’ll:
- Work directly with the Render Engineering team as you implement Scoped API Keys and share feedback
- Get early visibility into related features as they’re introduced during private beta
Your use case and feedback will help shape Scoped API Keys as we work toward general availability.