Skip to main content

​
Overview

Agent API keys (tokens) authenticate your agent when calling paid MCP tools. Each key has scope agent:connect which allows connecting to MCP servers and being charged for tool calls.

​
Creating Keys

1

Go to API Keys

Navigate to API Keys in your dashboard sidebar.
2

Click Create Key

Click the Create Key button.
3

Name your key

Give it a descriptive name like “Production”, “Development”, or “Claude Desktop”.
4

Copy immediately

The full key is shown once. Copy it and store it securely.
You cannot retrieve a key after creation. If you lose it, create a new one and delete the old one.

​
Key Format

Agent keys follow this format: 
sk_live_a1b2c3d4e5f6...
  • sk_ - Secret key prefix
  • live_ - Production environment
  • a1b2... - 64 random hex characters
The dashboard shows only the prefix and last 4 characters for identification: 
sk_live_...x7z9

​
Multiple Keys

Create separate keys for different purposes:
Key NameUse Case
ProductionYour deployed agent
DevelopmentLocal testing
Claude DesktopPersonal use
CursorIDE integration
Each key shares your account balance but can be revoked independently.

​
Rotating Keys

To rotate a key:
1

Create a new key

Create a new key with the same name (add “v2” or date).
2

Update your agents

Update your agent configurations to use the new key.
3

Delete the old key

Once all agents are updated, delete the old key.
Deleting a key is immediate and permanent. Any agents still using it will receive TOKEN_INVALID errors.

​
Deleting Keys

To delete a key:
  1. Go to API Keys
  2. Find the key you want to delete
  3. Click the Delete button (trash icon)
  4. Confirm deletion
Deleted keys cannot be recovered.

​
Troubleshooting

​
”TOKEN_INVALID” Error

Your key may be:
  • Deleted from the dashboard
  • Incorrectly copied (missing characters)
  • From a different account
Fix: Create a new key and update your configuration.

​
”TOKEN_MISSING” Error

The MCP server didn’t receive your token. Check:
  • AGENT_TOKEN environment variable is set
  • HTTP Authorization header is being sent
  • No typos in your configuration
See Configuring Your Agent for setup help.