MCP Server uses a different authentication method. The MCP Server requires a Personal Access Token (PAT), not a Project API Key (See: TestDino PAT).
Create a Key
- Open your project in TestDino
- Go to Settings → API Keys
- Click Generate Key
- Enter a Name and Expiration period (1 to 365 days)
- Click Create
Use your API key
- Node.js
- Python
Pass the key to the CLI with the Or set it as an environment variable:
--token flag:Set up CI/CD secrets
Never hardcode API keys in your workflow files. Store them as secrets and reference them at runtime.- GitHub Actions
- GitLab CI
- Jenkins
- Azure DevOps
- CircleCI
- Go to your repository → Settings → Secrets and variables → Actions
- Click New repository secret
- Name it
TESTDINO_TOKEN - Paste your API key
- Click Add secret
Rotate a key
When a key expires or you suspect it’s been exposed:- Generate a new key in Settings → API Keys
- Update your CI secrets with the new key
- Run one upload to confirm the new key works
- Revoke or delete the old key
Who can manage keys
API key management requires project-level permissions:| Role | Can create keys | Can revoke keys | Can view keys |
|---|---|---|---|
| Admin | ✓ | ✓ | ✓ |
| Editor | ✓ | ✓ | ✓ |
| Viewer | ✗ | ✗ | ✓ |
Security Practices
- Use short expiration periods for CI keys
- Create separate keys for different pipelines or environments
- Rotate keys if you suspect exposure
- Never commit keys to version control
Key Limits
| Plan | Keys per project |
|---|---|
| Community | 2 |
| Pro | 5 |
| Team | 10 |
| Enterprise | Unlimited |
Related
Getting Started
Initial setup and first upload
GitHub Actions
CI workflow setup
Node.js CLI
Full CLI reference
Project Settings
All project configuration