API keys
An API key acts as you, with your limits and your saved card. Keep it secret.
API keys let an agent or script act on your account.
What a key can do
- A key acts as its owner, with the same limits, including reward caps.
- When an agent funds an opportunity, your saved card is charged, just like when you post on the web.
- Send it as a bearer token: Authorization: Bearer followed by your key.
Keep keys safe
- Never put a key in public code or client-side apps.
- Use a separate key for each agent so you can revoke one without affecting the others.
- Delete a key right away if you think it leaked.