Skip to main content
Use a service account when a shared integration needs to query Rootprint without borrowing a human user’s credential. Common examples include dashboards, scheduled queries, AI agents, and incident automation. Service account keys are read-only query API keys. They use the rpk_ prefix, grant logs: read, and work on the same query endpoints as personal API keys.
Rootprint creates service accounts as regular non-admin users. They can query every index but cannot open Settings or reach any management endpoint.

​
Pick the right credential

​
Create a service account

  1. Sign in as an admin.
  2. Open Settings → Service accounts.
  3. Click Create service account.
  4. Enter a display name such as grafana-prod.
  5. Click Create.

​
Create a key

  1. In Settings → Service accounts, find Service account keys.
  2. Click Create key.
  3. Choose the service account.
  4. Enter a key name such as grafana-integration.
  5. Click Create key.
  6. Copy the key value before closing the dialog.
Rootprint shows the full key only once. Afterwards the key list shows its first characters and when it was last used.

​
Use the key

Send the key as a bearer token in the Authorization header: Authorization: Bearer rpk_…. Query logs with API keys has request examples and the endpoints a key can call.

​
Revoke access

Revoke one key when a client no longer needs access. Delete the service account when you want to revoke every key owned by that account. Clients using a revoked key receive 401 responses.