API keys
API keys authorize CodePushGo CLI and admin API actions. Device update endpoints are public, but app, bundle, channel, organization, and statistics admin endpoints require an API key.
Authorization: Bearer <CODEPUSHGO_API_KEY>Open API keys
Go to console.codepushgo.com/dashboard/apikeys.
Permissions
Use the least powerful key that can do the job:
- Read: inspect apps, releases, channels, and stats.
- Upload: upload JavaScript bundles from CI and read release metadata.
- All: manage apps, channels, organizations, and API keys.
CI usage
Store the key as CODEPUSHGO_API_KEY in your CI provider.
npx @codepushgo/cli@latest upload --app-id com.company.app --channel production --apikey "$CODEPUSHGO_API_KEY"Rotation
Create a new key, update CI secrets, run one upload to verify it, then remove the old key from the console.