requires project-scoped API key I can't get it，ask for help

[Andy-hs]

Describe your question

I am using a self hosted version of Langfuse, but many public API interfaces require project-scoped API key. However, I can only obtain the project's public and secret keys from the Langfuse UI

Langfuse Cloud or Self-Hosted?

Self-Hosted

If Self-Hosted

3.140.0

If Langfuse Cloud

No response

SDK and integration versions

No response

Pre-Submission Checklist

• I have checked for existing issues/discussions and consulted Langfuse AI.

[inkeep-ai-assistant[bot]]

The public and secret keys you're obtaining from the Langfuse UI are your project-scoped API keys(1). These keys are what you use to authenticate with endpoints that require project-scoped API keys(2).

To use them, authenticate with Basic Auth using your public key as the username and secret key as the password(2):

curl -u public-key:secret-key https://cloud.langfuse.com/api/public/projects/{projectId}/apiKeys

(2)

The confusion may stem from the fact that there are two types of API keys in Langfuse(2):

1. Project-scoped API keys - These are the public/secret key pairs you get from the UI and use for most API operations(2)
2. Organization-scoped API keys - These are only needed for organization-level management tasks (creating projects, managing memberships, etc.) and can be created via the Instance Management API or in Organization Settings(2)

For most Public API endpoints, your existing project public/secret keys are exactly what you need(2).

📚 Sources:

1. Building Langfuse's MCP Server: Code Reuse and Developer Experience - Langfuse Blog
2. SCIM & Organization-Key Scoped API Routes

---

Have another question? Just tag @inkeep.

[jannikmaierhoefer]

Hi @Andy-hs, there are two types of API keys in Langfuse:

• Project-scoped API keys (secret and public key you get when creating a project; used for trace ingestion, etc.)
• Organisation-scoped API keys (part of our self-hosting enterprise license)

Does this answer your question?

[Andy-hs]

Thank you for your answer, but I am aware of the two types of API keys in Langfuse that you mentioned. What I want to ask is how to obtain the Organization-scoped API keys，I couldn't find the entrance to get him

[Andy-hs]

I have already configured an ADMIN_API_KEY in my docker-compose.yml configuration,but he still can't access the interface (requires organization-scoped API key)

[jannikmaierhoefer]

This is only available in the Self-hosted Enterprise Edition: https://langfuse.com/enterprise

[benlangfeld]

@jannikmaierhoefer I want to use the MCP server to query across projects (eg list all projects which have traces using a particular model). I can't do this with either an org-scoped key or a project-scoped key, nor is it desirable for a SWE agent to use global (non-user-scoped) credentials for auditability reasons. Is there a reason Langfuse doesn't have user-scoped API keys with that user's permissions?