﻿---
title: ecctl auth key
description: Manages the current authenticated user API keys. ecctl auth	 - Manages authentication settings, ecctl auth key create	 - Creates a new API key for the...
url: https://www.elastic.co/elastic/docs-builder/docs/2564/reference/ecctl/ecctl_auth_key
products:
  - Elastic Cloud Control
applies_to:
  - Elastic Cloud Hosted: Generally available
  - Elastic Cloud Enterprise: Generally available in 4.0+
---

# ecctl auth key
Manages the current authenticated user API keys.
```
ecctl auth key [flags]
```


## Options

```
  -h, --help   help for key
```


## Options inherited from parent commands

```
      --api-key string        API key to use to authenticate (If empty will look for EC_API_KEY environment variable)
      --config string         Config name, used to have multiple configs in $HOME/.ecctl/<env> (default "config")
      --force                 Do not ask for confirmation
      --format string         Formats the output using a Go template
      --host string           Base URL to use
      --insecure              Skips all TLS validation
      --message string        A message to set on cluster operation
      --output string         Output format [text|json] (default "text")
      --pass string           Password to use to authenticate (If empty will look for EC_PASS environment variable)
      --pprof                 Enables pprofing and saves the profile to pprof-20060102150405
  -q, --quiet                 Suppresses the configuration file used for the run, if any
      --region string         Elastic Cloud Hosted region
      --timeout duration      Timeout to use on all HTTP calls (default 30s)
      --trace                 Enables tracing saves the trace to trace-20060102150405
      --user string           Username to use to authenticate (If empty will look for EC_USER environment variable)
      --verbose               Enable verbose mode
      --verbose-credentials   When set, Authorization headers on the request/response trail will be displayed as plain text
      --verbose-file string   When set, the verbose request/response trail will be written to the defined file
```


## See also

- [ecctl auth](https://www.elastic.co/elastic/docs-builder/docs/2564/reference/ecctl/ecctl_auth)	 - Manages authentication settings
- [ecctl auth key create](https://www.elastic.co/elastic/docs-builder/docs/2564/reference/ecctl/ecctl_auth_key_create)	 - Creates a new API key for the current authenticated user
- [ecctl auth key delete](https://www.elastic.co/elastic/docs-builder/docs/2564/reference/ecctl/ecctl_auth_key_delete)	 - Deletes one or more existing API keys for the specified user
- [ecctl auth key list](https://www.elastic.co/elastic/docs-builder/docs/2564/reference/ecctl/ecctl_auth_key_list)	 - Lists the API keys for the current authenticated user
- [ecctl auth key show](https://www.elastic.co/elastic/docs-builder/docs/2564/reference/ecctl/ecctl_auth_key_show)	 - Shows the API key details for the current authenticated user