Skip to main content
Every AIR credential belongs to a project and has one purpose.
AIR project settings showing separate app and worker key controls

Issue app and worker credentials independently from project settings.

​
Issue a key

1

Open Settings

Select the project, then open Settings.
2

Choose the key scope

Select Issue app key for application code or Issue worker key for an outbound worker.
3

Store the value immediately

AIR shows the complete key once. Put it in a local environment variable for development or a managed secret store for deployment.
Never commit a key. Avoid passing worker keys with air worker start --key in shared environments because command arguments can appear in shell history and process listings. Prefer AIR_WORKER_KEY.

​
Roles are not cloud roles

  • Owner manages project configuration, members, credentials, and tool approval.
  • Editor changes agents and prompts.
  • Viewer reads project state and traces.
  • Platform admin is an AIR application role with cross-project access. It is not an Azure role.