API keys let you talk to your agents from your own apps and servers. They're scoped per team and live under Team settings → API Keys.
Creating a key
- Team settings → API Keys
- Click + New API key
- Give it a name (e.g. "Mobile app", "Zapier", "Internal tooling")
- Click Create
- Copy the key now — you can't retrieve it later
Heads up
Store keys in a secure secret manager (1Password, AWS Secrets Manager, Doppler). Never commit them to source control.
Using a key
Pass it as a Bearer token on every request:
Authorization: Bearer YOUR_API_KEYSee REST API guide for a full walkthrough of sending messages.
Scope
A team API key grants access to every agent in that team. For finer-grained access, create separate teams.
Rotating
Every 90 days is a good rotation cadence:
- Create a new key
- Roll it out to your apps
- Confirm traffic on the new key
- Revoke the old key
Revoking
Click Revoke next to any key. Revocation is immediate — every request using that key gets 401.
