Origin CA keys are often used as the value of headerX-AUTH-USER-SERVICE-KEY when interacting withOrigin CA certificates API. It is also used byKeyless SSL key server.

The key value always starts withv1.0-.

• Changing the Origin CA key is not recorded byAudit Logs.
• Each time you view the Origin CA key, it will be presented as a different value. All these different values aresimultaneously valid until you click theChange button, which immediately invalidates all previously generated values.
• Origin CA keys have access to every account the user has access to.

To retrieve your Origin CA keys:

1. Log in to theCloudflare dashboard ↗.
2. Go toUser Profile >API Tokens.
3. In theAPI Keys section, selectOrigin CA Key.