Skip to main content

​
Key types

PrefixTypeUse
sk_live_Live secret keyFull access — production use
sk_test_Test secret keyFull access — requests logged separately, not billed
pk_live_Publishable keyVerify endpoint only — safe to embed in receiver code
Get your keys at app.imarobot.ai/settings/api-keys.

​
Usage

Pass your key as a Bearer token in the Authorization header: 
curl https://api.imarobot.ai/v1/agents \
  -H "Authorization: Bearer sk_test_YOUR_KEY"

​
Key security

  • API keys are stored as SHA-256 hashes — they cannot be recovered if lost
  • The full key is shown exactly once at creation time
  • If you lose a key, revoke it and create a new one
  • Never commit keys to source control — use environment variables

​
Publishable keys

Publishable keys (pk_live_) can only call GET /v1/verify/:token. They’re safe to include in receiver-side code because they cannot register agents, issue tokens, or access any management endpoints. 
// Safe to ship in your codebase
const verifier = createVerifier({ publishableKey: 'pk_live_...' });