# API Key Management

* [ ] CSRF delte other's apikeys  with 1-click
* [ ] IDOR in `workspaceID=`  Leads to Get Other's APIKey
* [ ] IDOR Edit Others APIKey Details&#x20;
* [ ] Privilege Escalations Like Guest member can read/edit/delete api keys in the organization
* [ ] Admin generated APIKey and then got  downgraded to nmember but still cacn access/use the old apikey he maked
