# Workspaces and keys

Every mech belongs to a workspace. When you first sign in, Mechane creates a personal workspace for you
and asks you to choose its URL: your dashboard lives at `mechane.ai/<workspace>/`.

## Workspace URLs

A workspace has a **name**, for display, and a **URL**, its slug. URLs use 3 to 39 lowercase letters,
numbers, and single hyphens, and include at least one letter. Some names are reserved for Mechane's own
pages.

Change the URL at `mechane.ai/<workspace>/settings`. Earlier URLs keep redirecting to the current one,
and nobody else can take them. Release an earlier URL there to let it go: its links stop working and
anyone can claim it.

## Mech pages

Each mech has a page at `mechane.ai/<workspace>/mechs/<mech>`, and the workspace's mechs are listed at
`mechane.ai/<workspace>/mechs`. Mech names are unique within a workspace, so they are not reserved
across Mechane.

## API keys

API keys authenticate requests to the Mechane API. Send one as `Authorization: Bearer <key>`.

- A key can use every mech in its workspace, and nothing outside it.
- A key is shown once, when you create it. Mechane stores only a digest.
- Keys cannot manage users, other keys, or credits; those need a signed-in owner.

Create and revoke keys at `mechane.ai/<workspace>/keys`. Revoking a key blocks new requests immediately.
Runs it already started continue, and open event streams stay open.
