@carbon-js/connect authenticates each app with a space-scoped Carbon API key. Generate one in the dashboard under Settings → API Keys (oncarbon.site/app/settings/api-keys).
Resolution order
When you connect an app, the key is resolved in this order — the first one present wins:CARBON_API_KEY environment variable
Keeps the secret out of your shell history — the right choice for CI:
Per-app keys
Each app’s key is written into its own config, so different apps can report to different Carbon spaces:The key is stored in the app’s local config on your machine (see How it works),
never uploaded anywhere except as the bearer token on each app’s OTLP export to Carbon.