Authentication

Weaviate Cloud (WCD) uses RBAC (Role-Based Access Control) to manage authentication. Below, you can find guides on how to create, edit, rotate and delete API keys for accessing Weaviate Cloud.

Create an API key

If you don't have an existing API key, you'll need to create one. Follow these steps to find the API keys section and create a new key if necessary:

Steps to create a new API key

To create an API key, follow these steps:

1. Open the Weaviate Cloud console and select your cluster.
2. Navigate to the API Keys section, found in the Cluster details panel.
3. If you need a new API key, click the New key button.
4. In the Create API Key form, provide a descriptive name for your key.
5. Choose the role for this API key. You can either select an existing role like admin or viewer, or create a new role with specific permissions.
6. Click the Create key button.
7. Important: This is the only time your API key will be displayed. Make sure to copy it or download it and store it in a secure location immediately after creation. You will not be able to retrieve the full key again.

Rotate an API key

Rotating an API key allows you to generate a new key while invalidating the old one, enhancing security.

Steps to rotate an API key

To rotate an API key, follow these steps:

1. Open the Weaviate Cloud console.
2. Select your cluster and navigate to the API Keys section.
3. Locate the API key you want to rotate and click the Rotate button next to it.
4. A confirmation dialog will appear, explaining that the old key will be invalidated. Click Rotate key to proceed.
5. Important: This is the only time your API key will be displayed. Make sure to copy it or download it and store it in a secure location immediately after creation. You will not be able to retrieve the full key again.

Edit an API key

Editing an API key allows you to modify its assigned roles. To edit an API key for a cluster:

Steps to rotate an API key

To edit an API key's roles and permissions, follow these steps:

1. Open the Weaviate Cloud console.
2. Select your cluster and navigate to the API Keys section.
3. Locate the API key you want to edit and click the Edit button next to it.
4. In the Edit API key form, you can modify the key's description/name.
5. You can also update the roles associated with this API key. Choose from the existing roles or assign different roles.
6. Click the Save button to apply your changes.

Delete an API key

To delete an API key, follow these steps:

Steps to delete an API key

To delete an API key, follow these steps:

1. Open the Weaviate Cloud console.
2. Select your cluster and navigate to the API Keys section.
3. Locate the API key you want to delete and click the Trash can button next to it.
4. A confirmation dialog will appear. Enter the necessary text (usually the API key name or a confirmation phrase) to confirm the deletion.
5. Click on the Delete key button.

Further resources

• Manage authorization in WCD
• RBAC documentation

Support

If you use Weaviate Cloud (Database cluster(s) or Weaviate product in the cloud) or have a self-hosted support package, open a ticket in the Support Portal or email Weaviate support directly. To add a support plan, contact Weaviate sales.

Use the Support Portal for direct help from the Weaviate team: open and track tickets, and we'll respond in line with your support plan. The Community Forum is open to everyone, and a great place to ask questions, get help with your cluster, and connect with other developers. For all the ways to get help, see the Support overview.

Weaviate Support Portal

Direct help from the Weaviate team for Weaviate Cloud. Open and track tickets in the Support Portal.

Weaviate Community Forum

Ask questions, share ideas, and connect with other developers on our Community forum.