Authentication & keys

Create scoped workspace keys, authenticate requests, and manage key rotation.

Create a workspace key

Key provisioning is currently an owner-operated CLI, not a public signup flow. Keys are displayed once and only their hashes are stored. Use separate keys for each application and environment.

Terminal · render-only key

pnpm keys:create --workspace ws_local --name "My chart bot" \
  --scopes market:read,chart:read,chart:write --rpm 60 --daily 1000

For managed analysis, also grant agent:run memory:write setup:write. A key cannot access another workspace’s jobs or images.

Environment

export AGENT_CHARTING_URL=http://127.0.0.1:8789
export AGENT_CHARTING_API_KEY=YOUR_KEY

# Send this header on every request, including image downloads
Authorization: Bearer $AGENT_CHARTING_API_KEY

Rotate and revoke

Terminal

pnpm keys:list --workspace ws_local
pnpm keys:revoke --id KEY_ID