LXLexiSync

API keys & scopes

Secret and public keys, scoped credentials, rotation, and how to use them safely.

LexiSync ships two key types per organization and supports scoped credentials for fine access control.

Org keys

KeyScopeUse
sk_…Full (legacy)CLI / CI / server. Treat as a password.
pub_…readRead-only API. Public distribution if needed.

Scoped credentials

Create additional sk_… keys with a subset of scopes:

  • read — list, get, insights.
  • source:write — upsert keys and source-language translations.
  • translation:write — upsert non-source translations.
  • publish — publish / rollback / retry outbox.
# Create a scoped credential
curl -X POST -H "Cookie: $SESSION" \
  -d '{"name":"ci-translate","scopes":["read","translation:write"]}' \
  https://lexisync.app/api/org/keys

# Rotate the org secret
curl -X POST -H "Cookie: $SESSION" \
  -d '{"action":"rotate","which":"secret"}' \
  https://lexisync.app/api/org/keys