# Choose what each API key may do

- Date: 2026-10-12
- Type: New
- Surface: Developer portal and CLI, /api/public
- What you need to do: Nothing.
- Address: https://developers.rivr.io/changelog/2026-10-12-api-key-capabilities

When you create an API key you choose its capabilities: read orders, manage orders, read customer details, read economy, read settings. You can change them later; the change applies to tokens already issued within about a minute. Staff management and settings changes can never be given to a key.