API keys and teams

API key

Each project has an API key that identifies it to NetStack and authenticates your own servers. It looks like ns_api_....

• The full key is shown once, when the project is created or the key is rotated. NetStack stores only a hash, so a lost key cannot be recovered, only replaced.
• Rotate it any time from API keys > Rotate API key. This is available on every plan. The old key stops working immediately.
• Never ship an API key inside a client build that players can download.

AI key

The AI key lets AI coding agents read your project's configuration and the NetStack documentation. It cannot read player data. Generate, rotate or revoke it from the API keys tab.

Teams

Invite teammates from the Team tab by their NetStack account email. They need to have signed up first.

Role	Can do
Owner	Everything, including keys, team, settings and deleting the project
Manager	Edit Functions and properties
Viewer	Look at the project and run test runs, but not change anything

Every change to Functions, properties, keys and team membership is recorded in an audit log.