Security Information
Your API key grants the same level of access as a Co-Owner in your private server, but without the additional logging that comes with in-game actions. This means that if a bad actor obtains your API key, they could perform destructive actions (such as mass-banning players) without leaving a clear audit trail identifying who issued the commands. To keep your server safe:- Only share your API key with trusted sources, such as well-known ER:LC bots or your own development projects.
- Treat your API key like a password. Never post it publicly or share it casually.
- If you suspect your API key has been exposed, regenerate it immediately from your private server settings.
Anatomy of Your Server-Key
