Skip to main content
Creating and managing workspace API keys requires a Business or Enterprise plan and the owner or admin role in the workspace. On Free and Pro plans Lovable shows an upgrade prompt instead, and if the workspace later moves to one of those plans, the connection stops working. The account that creates the key must have a verified email, because Lovable refuses API calls until it is verified. A key belongs to one workspace, so create one key for each workspace you want StackOne to read and connect each one separately in StackOne Hub.

​
Create the API key

A workspace API key (access token) lets StackOne read one workspace’s members and groups. Give StackOne its own key so you can limit and revoke it on its own.

1

Sign in to Lovable

Sign in to your Lovable account as an owner or admin of the workspace.

2

Start a new key

Click New API key, then enter a Key name such as StackOne Integration.

  • Workspace admins and owners can see the name.
  • Lovable attributes actions made with the key to the person who creates it.
3

Leave the credit limit blank

Leave Credit limit blank for no limit.

  • The limit caps the AI build credits the key can spend each month. StackOne only reads the workspace, which spends no credits.
4

Choose an expiration

Choose an Expiration: 7, 30, 60, 90, or 180 days, 1 year, or Never.

  • Lovable recommends an expiry date over Never.
  • When the key expires, requests fail and the connection stops working until you create a new key and paste it into StackOne Hub. Expired keys stay in the list.
5

Grant access

Under Access, set Workspace to Read and Projects to None.

  • Workspace: Read lets the key list projects and read workspace details, members, groups, security insights and analytics. Every StackOne action needs only this access.
  • Do not use Apply preset → Full access. It also grants write access to projects, including publishing and deleting them.
  • Apply preset → Read only also works, but it sets Projects to Read too, which lets the key read each project’s settings and security scans. StackOne does not need that.
6

Limit the key to StackOne's IP addresses (optional)

Leave IP allowlist empty to accept requests from any address. To accept only StackOne, click Upload CSV and choose a file with every one of StackOne’s IP addresses, one address per row.

  • A request from an address that is not on the list fails with 403 ip_restricted, so a list that misses a StackOne address breaks the connection.
  • StackOne may add or remove addresses. To update the list later, open the key’s menu and click Edit IP allowlist.
7

Create and copy the key

Click Create API key, then copy the key value.

  • Lovable says the secret value is shown only once, right after the key is created. If you lose it, create a new key.
  • The key starts with lov_.
  • Paste it into the API Key field in StackOne Hub.

​
Revoke the key

To stop StackOne from reading the workspace, revoke the key.

  • Go back to Workspace access tokens and open the key’s menu.
  • Click Revoke key, then confirm. Revocation is permanent and normally takes effect immediately, with a brief delay possible.
  • To replace a key, create a new one, paste it into StackOne Hub, check that the connection works, then revoke the old one. A key’s name, scopes and expiry cannot be changed after creation.

​
Linking the Account from the Hub

1

Navigate to the Hub

Use one of the three Linking Account Methods to access the Hub.
2

Fill out the fields

Fill out the following fields using details from your provider:
  • API Key
3

Connect

  • Click Connect
  • If applicable, the provider will redirect you to a sign-in or authorization page. Complete the provider’s authorization flow.
  • Once authorization is successful, you will see a confirmation popup

If the account linking is successful, you will see the newly linked account on your Accounts page.