Skip to main content
Authentication uses an API key. Send the key as a Bearer token on every REST API or MCP request.

Create a key

  1. Sign in to the API keys page.
  2. Click Create API key.
  3. Give the key a name that identifies its environment or application.
  4. Copy the key and store it in your secret manager.
The legacy x-api-key header also works for REST requests, but Bearer authentication is recommended.
Never expose an API key in browser code, mobile app bundles, public logs, or source control. Revoke a key from the dashboard if it may have been exposed.

Authentication errors