A scoped API key has independent read/write permissions per directory. Read lets it
list files, read metadata, download public files, and list/view voice notes there (every
voice note is always private, but visible to read). Write lets it upload, delete,
and rename/tag — and, deliberately, covers private files there too (including voice
notes): a key can't sensibly manage content it isn't allowed to see. When a directory is
nested under another scope, the more specific one wins outright.
⚠ Shown once — copy it now, it cannot be retrieved again
Existing keys
Loading…
Backend Policies
Restrict uploads under a directory to only the backends you choose — useful to keep
sensitive files off a less-trusted third-party backend entirely. A rule applies to its
directory and every subfolder nested under it; when a nested directory has its own rule,
that more specific rule wins outright. Enforced on both the normal upload and the
presigned direct-to-storage path — a large file can't bypass this.