diff --git a/box/overall/quickstart.mdx b/box/overall/quickstart.mdx
index b171b42f9..42df492da 100644
--- a/box/overall/quickstart.mdx
+++ b/box/overall/quickstart.mdx
@@ -20,6 +20,13 @@ Go to the [Upstash Console](https://console.upstash.com) and create an API key.
   <img src="/img/box/create-api-key.png" alt="Create a Box API key in the Upstash Console" />
 </Frame>
 
+When you create the key, pick a **Permissions** value:
+
+- **Read/Write**: full access to every box in the account.
+- **Read Only**: can view boxes, logs, and files and run commands as a restricted user, but cannot create, change, or delete anything. Environment variables and other configured secrets are masked; logs and readable files are shown as they are.
+
+A read-only key is labeled **Read Only** next to its prefix in the API keys list. Permissions cannot be changed after the key is created — revoke the key and create a new one to change them.
+
 ### 2. Install the SDK
 
 <CodeGroup>
diff --git a/llms-full.txt b/llms-full.txt
index e9a67deb3..3aa64991c 100644
--- a/llms-full.txt
+++ b/llms-full.txt
@@ -18512,6 +18512,13 @@ Go to the [Upstash Console](https://console.upstash.com) and create an API key.
 
   <img alt="Create a Box API key in the Upstash Console" />
 
+When you create the key, pick a **Permissions** value:
+
+* **Read/Write**: full access to every box in the account.
+* **Read Only**: can view boxes, logs, and files and run commands as a restricted user, but cannot create, change, or delete anything. Environment variables and other configured secrets are masked; logs and readable files are shown as they are.
+
+A read-only key is labeled **Read Only** next to its prefix in the API keys list. Permissions cannot be changed after the key is created — revoke the key and create a new one to change them.
+
 ### 2. Install the SDK
 
 <CodeGroup>