nrepo key

nrepo key list [options]
nrepo key create <label> [options]
nrepo key revoke <key-id> [options]

API keys authenticate the CLI, the iOS app, and any direct call to the REST API. They look like nrp_ followed by 64 hexadecimal characters, and only the hash is stored server-side.

All three subcommands take --json and --human.

Caution

nrepo key create requires Pro. On the free plan it fails with This feature requires a Pro plan. Upgrade at https://neuralrepo.com/settings. Listing and revoking work on any plan — and so does nrepo login, which mints a key through a path with no plan check, so free accounts can still use the CLI.

List

nrepo key list

2 API keys

  ci-pipeline  ak_9f2c1b7e
    Created: Jan 15, 2026  Last used: Jul 23, 2026

  CLI (auto-generated)  ak_44ad0c31
    Created: Feb 20, 2026  Last used: never

The second value on each line is the key ID — what revoke takes. The key itself is never shown again after creation. A key that has never been used prints never rather than a date.

With no keys:

No API keys found. Create one with `nrepo key create <label>`.

--json returns { "api_keys": [ { "id", "label", "created_at", "last_used_at" } ] }.

Note

Keys labelled CLI (auto-generated) were minted by nrepo login. Every browser login creates another one, so a machine you have logged in on repeatedly accumulates them. Revoking the extras is safe as long as you keep the one your current session is using.

Create

nrepo key create "github-actions"

✓ API key created

  Label:  github-actions
  Key:    nrp_4f8a2b...

Save this key now — it won't be shown again.

Danger

The full key is displayed exactly once. There is no way to retrieve it later — a lost key has to be revoked and replaced.

Labels are capped at 100 characters. For scripting, take the key straight from --json:

KEY=$(nrepo key create "ci-$(date +%Y%m)" --json | jq -r '.key')

Revoke

nrepo key revoke ak_9f2c1b7e
# ✓ API key ak_9f2c1b7e revoked.

Takes the key ID from nrepo key list, not the label and not the key itself. Revocation is immediate and permanent; a key ID that does not exist returns API error (404): API key not found.

Caution

Revoking the key your own session is signed in with logs this machine out — every subsequent command fails with Authentication expired. Run \nrepo login` to re-authenticate.Check nrepo whoamiagainst the label before revoking, and note thatnrepo logout` does the reverse: it clears the local file but leaves the key valid.

Next Steps

Authentication Which login flow to use where, and what each one stores locally.

API authentication Send the same key as X-API-Key from any language.

CI/CD Store a key as a secret and capture ideas from a pipeline.

Security How keys are hashed, scoped, and audited.