Service Accounts

Creating and managing service accounts for automated systems and integrations

Service accounts provide programmatic access to Opik for automated systems, CI/CD pipelines, and integrations. Unlike user accounts, service accounts use API keys for authentication and don’t require interactive login.

Service Accounts is available on Opik Cloud and Enterprise plans. This feature is not available in open-source deployments. Reach out if you want to enable this feature for your Opik deployment.

Creating a Service Account

  1. Navigate to the Admin Dashboard
  2. Click on Service Accounts in the sidebar
  3. Click Create service account
  4. Enter a name for the service account
  5. Optionally select a default workspace
  6. Optionally select authorized workspaces to restrict access
  7. Click Create

Use descriptive names that indicate the service account’s purpose, such as ci-pipeline-prod or monitoring-service.

Managing API Keys

Each service account can have multiple API keys. To manage keys:

  1. Navigate to the Service Accounts section in the Admin Dashboard
  2. Find the service account and click Manage API keys

From the API keys modal you can:

  • Add key: Generate a new API key
  • Copy key: Copy an existing key to clipboard
  • Delete key: Remove a key (takes effect immediately)

API keys are only shown once when created. Copy and store them securely immediately. If you lose a key, you’ll need to generate a new one.

Deleting a Service Account

Deleting a service account immediately revokes all its API keys. Any systems using those keys will stop working.

  1. Navigate to the Service Accounts section in the Admin Dashboard
  2. Find the service account you want to delete
  3. Click the delete action
  4. Confirm the deletion

Using Service Account API Keys

Configure the Opik SDK with a service account API key:

1import opik
2
3# Using environment variables (recommended)
4# export OPIK_API_KEY=your-service-account-api-key
5# export OPIK_WORKSPACE=your-workspace
6client = opik.Opik()
7
8# Or configure directly
9client = opik.Opik(
10 api_key="your-service-account-api-key",
11 workspace="your-workspace"
12)