Case Study: Runway adds secure API key management with WorkOS

Runway adds secure API key support in 2 steps with WorkOS

Runway, a project management SaaS company, needed to provide its users with a secure and self-serve method for authenticating with their API. Their challenge was to build a robust API key management system that could handle key creation, scoping, and validation without slowing down their development or requiring extensive custom backend work. They turned to WorkOS and its AuthKit product to implement this critical feature.

WorkOS provided a complete solution that included a pre-built UI widget for key management, a backend validation helper, and a full permissions system. This allowed Runway to quickly offer both user-scoped and organization-scoped API keys, giving their customers secure, fine-grained access to the API. The implementation provided immediate results, including an automatic audit trail of all key activity and instant key revocation, ensuring security without any performance impact on Runway's API.

Runway