You can now issue read-only API keys from the Schematic dashboard. Read-only keys are restricted to GET operations. They cannot create, update, or delete any resources. Flag check routes (which use POST under the hood) are correctly permitted on read-only keys.

This is useful for giving read access to agents, internal tooling, analytics pipelines, or third-party integrations without exposing write permissions.